Account that per spec the domain requesting registration of keys must match (or be a subdomain) of the webauthn RP ID, namely the FQDN of your Gluu server
getAttestationMessage
Insert a security key, then press "getAttestationMessage" button, it will start blinking...