Questions tagged [yubikey]
The yubikey tag has no summary.
55 questions
0
votes
1
answer
191
views
Unlock screen in KDE with YubiKey in Debian 13 trixie (FIDO U2F PAM)
I've obtained a Yubikey 5, and I've successfully configured it to login into my Debian GNU/Linux 13 trixie, following this guide:
https://support.yubico.com/s/article/Ubuntu-Linux-login-guide-U2F
(...
3
votes
1
answer
556
views
How to implement PAM over U2F and FIDO2 to integrate YubiKey authentication as extra security layer to an OpenVPN server?
I am trying to add an extra security layer to an OpenVPN server and want to use YubiKeys for that purpose. Adding this layer for SSH logins is straightforward and works without any problems (OpenSSH ...
0
votes
0
answers
173
views
When generating the resident yubikey SSH key, is the secret key generated on the computer really safe?
According to https://stephentanner.com/ssh-yubikey.html to generate a key on my yubikey I should do:
ssh-keygen -t ed25519-sk -O resident -O verify-required -C "Main Key"
I did and touched ...
2
votes
1
answer
904
views
"Passkey can’t be created on this device” error with a Google FIDO2 key on Chrome?
Trying to set up a YubiKey as a backup for my Google account in case I lose my phone. Attempting to set up FIDO2 authentication into my Google Account with a FIDO2 key. My key is for my desktop via ...
2
votes
0
answers
1k
views
How to use a Yubikey / FIDO2 device / ed25519-sk key with ssh-agent on MacOS (15.3+)
Please note: solutions involving either disabling or modifying the inbuilt ssh-agent are unlikely to work. I've seen numerous people suggest this is due to recent changes in MacOS (I'm on 15.3), but ...
3
votes
0
answers
351
views
Can't set up GPG with Yubikey on WSL
I'm trying to set up a YubiKey via gpg using WSL Ubuntu on Windows, but I get error:
$ gpg --card-status
gpg: selecting card failed: Service is not running
gpg: OpenPGP card not available: ...
2
votes
1
answer
185
views
GPG-AGENT only prompts for one key of multiple keys loaded with same gpg key
I have (3) YUBIKEYs, all loaded with the same GPG key.
I am currently trying to make the move to a debian-based distro from Fedora.
Everything worked fine on Fedora 38-thru-41.
I am having an issue on ...
4
votes
1
answer
2k
views
YubiKey 5C NFC not recognized on Silicon MacBook with macOS Sonoma (14.6.1)
I am trying to get a recently bought YubiKey 5C NFC to work on my MacBook (16", Nov. 2023, Apple M3 Max processor) with macOS Sonoma (14.6.1) installed.
After plugging the Yubikey in it flashes a ...
1
vote
1
answer
812
views
OpenSSH locally verify passphrase and security key
I'm running in cmd (as admin) ssh-keygen -t ed25519-sk -C "comment" to generate an SSH keypair. I successfully enter a passphrase and tap my security key when prompted.
Program/device info:
...
1
vote
0
answers
130
views
Cannot setup pam_oath with Yubikey: OTP not authorized to login as user
So, what I want is to login to system with Yubikey as a second factor or the only factor.
I use Linux Mint 21.3, my Yubikey is 5C NFC.
My /etc/pam.d/common-auth:
auth [success=1 default=ignore] ...
2
votes
1
answer
158
views
Windows 11 2FA prompt opens a console instead of a GUI window
Some time ago, I started using FIDO2 keys (Yubikey 5 NFC, to be precise) as a form of second-factor authentication on a few sites that support it.
However, after some change in my system, most likely ...
1
vote
1
answer
87
views
store onion address inside yubikey
I would like to be able to save an onion (v3) address, without the final string .onion inside a yubikey safely.
I want the yubikey that provide this address in plain text at the touch event.
I have ...
1
vote
0
answers
154
views
YubiKey Authenticator App doesn't recognize YubiKey after unlocking the card via PinEntry
I've got a pretty basic password/OTP set up on macOS:
my YubiKey has the sig/aut/enc subkeys to encrypt/decrypt my passwords in the password store
my OTPs are solely on my YubiKey - I use the Yubikey ...
29
votes
3
answers
10k
views
Set Default Security Key Settings (Windows 11)
As of the latest Windows Insider Build (Dev Channel), 23541.1000 ni_prerelease, the following appears when Windows is prompted for security key input:
Whereas before this update, it was only Security ...
5
votes
2
answers
8k
views
Yubikey ssh authentication fails with "signing failed for ECDSA-SK"
I have a Yubikey (Security Key NFC by Yubico) that I'm trying to set up on a Linux machine for SSH authentication in Discoverable keys mode. I've followed this tutorial and created the keys with
ssh-...