run the install script or manualy by folowing this guide:

Debian 13 fingerprint setup for Broadcom / Dell ControlVault 3

This is the exact path that ended up working for the Broadcom sensor (0a5c:5843) on Debian 13 (trixie).

1) Start with a clean fingerprint stack

sudo apt update
sudo apt install -y fprintd libpam-fprintd libfprint-2-2 \
  git meson ninja-build build-essential \
  libglib2.0-dev libgudev-1.0-dev libgusb-dev \
  libnss3-dev libpixman-1-dev libcairo2-dev \
  libgirepository1.0-dev gtk-doc-tools python3-gi

sudo apt build-dep -y libfprint-2-2

This installs the standard Debian fingerprint daemon, PAM module, and build dependencies.

---

2) Install the Broadcom TOD driver package files

The Broadcom sensor needs the Dell/Launchpad TOD plugin and firmware bundle.

cd /tmp
rm -rf libfprint-2-tod1-broadcom libfprint

git clone --depth=1 --branch upstream git://git.launchpad.net/libfprint-2-tod1-broadcom
cd libfprint-2-tod1-broadcom

Copy the Broadcom rule, driver, and firmware into place:

sudo cp lib/udev/rules.d/60-libfprint-2-device-broadcom.rules /usr/lib/udev/rules.d/
sudo chown root:root /usr/lib/udev/rules.d/60-libfprint-2-device-broadcom.rules

sudo mkdir -p /usr/lib/x86_64-linux-gnu/libfprint-2/tod-1
sudo cp usr/lib/x86_64-linux-gnu/libfprint-2/tod-1/libfprint-2-tod-1-broadcom.so \
  /usr/lib/x86_64-linux-gnu/libfprint-2/tod-1/
sudo chown root:root /usr/lib/x86_64-linux-gnu/libfprint-2/tod-1/libfprint-2-tod-1-broadcom.so

sudo cp -r var/lib/fprint/fw /var/lib/fprint/
sudo chown -R root:root /var/lib/fprint/fw

---

3) Build libfprint with TOD support

cd /tmp
git clone --depth=1 --branch tod https://gitlab.freedesktop.org/3v1n0/libfprint.git
cd libfprint

Disable the test and example subdirs so the build is cleaner:

sed -i "/subdir('tests')/s/^/#/" meson.build
sed -i "/subdir('examples')/s/^/#/" meson.build

Build and install the libraries:

meson setup build --prefix=/usr
ninja -C build

sudo cp build/libfprint/tod/libfprint-2-tod.so.1 /usr/lib/x86_64-linux-gnu/
sudo cp build/libfprint/libfprint-2.so.2 /usr/lib/x86_64-linux-gnu/
sudo ln -sf /usr/lib/x86_64-linux-gnu/libfprint-2-tod.so.1 /usr/lib/x86_64-linux-gnu/libfprint-2-tod.so

---

4) Restart the fingerprint service

sudo udevadm control --reload-rules
sudo systemctl daemon-reload
sudo systemctl restart fprintd

---

5) Enroll your fingerprint

fprintd-enroll

At this point the sensor should be detected and enrollment should complete.

---

6) Enable fingerprint login

Make sure the PAM integration is installed:

sudo apt install libpam-fprintd

Then enable it:

sudo pam-auth-update

Turn on Fingerprint authentication, save, and exit.

---

7) Test that it works

Try these:

fprintd-list $USER
fprintd-verify $USER

Then test login prompts with:

sudo -k
sudo ls

If PAM is enabled, the system should accept the fingerprint at authentication prompts.

---

What mattered most

The key fixes were:

1. Using the correct Broadcom TOD repo branch: upstream
2. Building the matching TOD libfprint branch: tod
3. Installing the Broadcom firmware bundle into /var/lib/fprint/fw
4. Replacing the normal libfprint libraries with the TOD versions
5. Restarting fprintd before enrolling

That combination is what got the Broadcom ControlVault reader working.