Questions tagged [yubikey]
The yubikey tag has no usage guidance.
40
questions
0
votes
0
answers
33
views
How do I activate a Yubikey Bio in Safari
I can't seem to find a way to get my Yubikey bio to work with Safari on a MacBook. Currently I can use the key normally on a windows machine using Microsoft Edge however I get an error stating "...
- 11
0
votes
0
answers
19
views
Can't hide logged in user on log in screen
Window 10 Pro, current updates.
I'm configuring Yubico Login (credential provider) and running into an issue.
Whenever I lock the screen in an account, that account is displayed on the lock screen and ...
- 1
0
votes
1
answer
228
views
Why YubiKey (USB key) needs administrator rights (or any other device)
Some time after a clean install of Windows 10 or 11 and using Yubico keys (USBkeys) needs administrator right to programs to detect it.
It happens randomly or I don't remember / can't imagine what I ...
- 101
0
votes
1
answer
128
views
GPG periodically loses connection to yubikey on monterey
The connection between gpg and my yubikey appears to periodically fail. Decryption attempts are met with the pinentry-mac dialog "please insert card with serial number X".
gpg --card-status -...
rueberger
0
votes
0
answers
233
views
Yubico WSL2 installation
I got myself a Yubico Series 5 key. I configured it on windows correctly according to this guid. Now I want to it in WSL2. For this I followed the steps from this guide.
For any reason in the wsl2 ...
1
vote
0
answers
215
views
Error when register Yubikey Bio with website
I am having an issue registering a yubikey bio with a website. I have managed to register a Yubikey 5 series with the website without issue however when I try with the Yubikey bio I get an error like ...
- 11
1
vote
1
answer
78
views
What is the cryptographic relationship between an ssh key and my Yubikey?
I am curious what is the cryptographic relationship between the generated ssh private (and public) key when I use my Yubikey to add an extra layer of protection.
Does ssh-keygen write anything into ...
- 133
0
votes
2
answers
870
views
How to disable OpenSC YubiKey password prompt in Firefox
I have a YubiKey nano plugged into a 2019 MacBook Pro.
When I visit some websites (one public example being Gmail), Firefox brings up a password dialog prompting me to enter the YubiKey password. ...
- 201
0
votes
0
answers
62
views
Using Yubi Key to decrypt data on remote server
I'm trying to use a Yubi Key to decrypt data on a remote server that I authenticate to by ssh.
I forwarded the gpg-agent, the gpg-agent.conf is:
enable-ssh-support
default-cache-ttl 60
max-cache-ttl ...
Eatay Mizrachi
0
votes
0
answers
20
views
How to create and manage PGP keys and move them to YubiKeys (at enterprise scale)?
I currently use this guide (which I created) to create and manage my own keys using gpg --expert --full-generate-key, gpg --expert --edit-key and gpg --card-edit (among other commands).
How can one ...
- 690
1
vote
0
answers
119
views
Best strategy after losing GPG/PGP key passphrase (but still access to YubiKey)
When I got my first YubiKey several years ago, I created a new GPG key specifically for it. After uploading the private key to the YubiKey (keytocard), I also stored an armored copy of the private key ...
- 1,052
0
votes
1
answer
371
views
SSH Using YubiKey 5 and ED25519 Algorithm
I am starting to use a YubiKey 5 to ssh into remote boxes instead of using a software key. I am generating the keys using this command:
ssh-keygen -t ed25519-sk
This works when I ssh into Ubuntu, but ...
- 103
2
votes
2
answers
282
views
Yubikey 5c not recognized via docking station
I have a new YubiKey 5C NFC which when plugged directly in my laptop works fine. However, when I plug it into my docking station it doesn't work at all.
OS: Linux Mint 20.1
Kernel: 5.4.0-77-generic
...
- 103
0
votes
0
answers
33
views
Are there solutions to boot to a hidden OS only when special usb key is present?
My laptop was stolen recently.
Unfortunately I did not take the time to install a honeypot on it.
With my new laptop I am thinking about installing a honeypot OS and a hidden OS that I will use for my ...
1
vote
0
answers
102
views
ssh-add -s Win10
I am unable to add my card using ssh-add -s on Windows 10, ssh-agent is running. Getting below error: C:\Program Files\Yubico\Yubico PIV Tool\bin>ssh-add -s libykcs11.dll
Enter passphrase for PKCS#...
- 11
2
votes
0
answers
840
views
Bitlocker Full Drive Encryption with YubiKey
I'd like to secure the hard discs of a new Windows 10 (Pro/Enterprise) PC with BitLocker full disc encryptuon using hardware tokens and PIN (real 2FA).
How can I set up a YubiKey so I can use it as ...
- 2,004
1
vote
1
answer
2k
views
gpg: decryption failed: No secret key
First, I spent an hour trying answers with similar titles so please read this through before flagging this question as a duplicate.
I use a YubiKey to store my PGP private key using its smart card ...
- 690
0
votes
1
answer
284
views
Mac GPG can't generate smartcard keys
Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4
% gpg --card-edit
Reader ...........: Yubico YubiKey OTP FIDO CCID
Application ID ...: ...
- 101
2
votes
1
answer
1k
views
SSH server asking for password, but PasswordAuthentication is disabled
what you will see is the current state of a problem I am trying to solve.
I restarted sshd before filling the body this question.
What I am trying to do:
I need to use ssh keys with a yubikey ...
- 51
1
vote
0
answers
680
views
Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?
Yubikey as SmartCard
I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the Encrypted ...
- 508
1
vote
1
answer
222
views
Preventing Win 10 from automatically installing certificates from smart cards
A short background on the issue. I have a Yubikey 5 with PIV containing 3 personal certificates. One of the certificates is also installed locally on my Win 10 machine. All the certificates contain ...
- 125
1
vote
1
answer
724
views
Yubikey with Kleopatra on Windows 10
I have a Yubikey 4C Nano that I use with Linux and MacOS without issue. Recently, I installed a version of Windows on my macbook pro that allows me to dual-boot (so I can run the windows version of ...
- 381
0
votes
0
answers
84
views
Strong encryption for a local file (PGP)
Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site.
I am looking for a safe method to encrypt a local file on my machine. Let's ...
- 125
2
votes
1
answer
389
views
yubikey/gpg-agent always asking for my PIN when running git commit
recently, git has been asking me for my yubikey pin every 3 or 4 times after i've already typed in my pin. this didn't use to happen before. i'm thinking maybe the card isn't getting read correctly or ...
- 21
1
vote
1
answer
32
views
Yubikey FIPS Approved Mode
I'm having issues getting my Yubikey FIPS version to unlock and exit the FIPS approved mode.
You can see below that I first put the yubikey into fips mode by setting an admin pin. Then, I ...
- 21
3
votes
1
answer
873
views
Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?
Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
- 551
-1
votes
1
answer
540
views
Using ssh key on Yubikey on Sourcetree program
I can not make sourcetree work with the ssh key that i have in my yubikey.
Does anybody know how can i fix it?
Thank you.
P.D: I have tried different recommendations that i found on the internet, ...
- 11
0
votes
1
answer
179
views
make .ssh/id_rsa read key from yubikey
I have my ssh keys within a yubikey, I use gpg-agent.conf with something like this:
pinentry-program /usr/local/bin/pinentry-mac
enable-ssh-support
default-cache-ttl 60
max-cache-ttl 120
This helps ...
- 263
0
votes
1
answer
247
views
How do I get windows applications to recognize my yubikey?
I have successfully used my Yubikey to get my Chrome and Firefox browsers to get my 2-Step Verification to work with my Google account. Unfortunately, I have a few windows applications which I cannot ...
- 101
1
vote
1
answer
449
views
Programmatically unlock PIV slot 9a with OpenSC for another application
I'm using a Yubikey 4 with a certificate loaded in PIV slot 9a (PIV Authentication; OpenSC slot 0).
Inside Firefox 64, I am using the OpenSC PKCS#11 driver.
What I want to accomplish is to "unlock" ...
- 43
0
votes
1
answer
2k
views
Sharing Yubikey between host and VMWare
I have a Yubikey 4 working on my Win10 host machine, but also want to use in my VMWare Workstation 12 Win7 session.
At first, connecting to the shared Yubico device failed, because Windows could not ...
- 3,947
0
votes
1
answer
477
views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
- 1,975
2
votes
1
answer
494
views
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
- 416
5
votes
1
answer
4k
views
Scdaemon won't detect Yubikey on Windows 10
This has recently started after I updated to Windows 10 1803 (x64). I have updated Gpg4Win to the latest version (3.1.2), but this has not fixed anything.
I have tried the following:
Remove the ...
- 315
3
votes
1
answer
1k
views
Which pam module is used for gnome admin password requests?
I have added the yubikey pam module to my sudo pam config, and I like the results—no one can get superuser access through sudo or su without a yubikey.
Setting aside the fact that this is possibly ...
- 133
1
vote
0
answers
57
views
GPG should fail silently when external card is not inserted, instead of asking over and over
I'm running Linux.
I have a Yubikey 4, where my GPG subkeys are stored. On the computer, gpg-agent transparently uses these keys.
The problem is when I don't have my Yubikey inserted. If anything ...
- 1,922
0
votes
2
answers
379
views
What security key specification is needed for WebAuthN compatibility?
Is it already possible to buy a buy a USB-pendrive-style authentication key that is compatible with WebAuthN?
If yes, what technical standard/specification should it support?
According to press ...
- 1,859
1
vote
1
answer
2k
views
Yubikey 4 not working (Linux & Windows)
I received a Yubikey 4 a few days ago. I got it along a special WIRED Magazine offer. The problem with the key is, that it is not recognized neither by Windows 10, nor by Linux (Mint 18).
Linux
When ...
- 275
6
votes
2
answers
13k
views
How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?
I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10:
I created the keys according to this:
gpg --card-status
Reader ...........: Yubico ...
- 416
4
votes
2
answers
3k
views
Unable to get yubikey neo u2f working in Linux inside of VMWare Workstation
I am unable to get my YubiKey Neo U2F working in VMWare Workstation Pro 12.5. Testing it against Yubico's test site or against Akisec's test site both fail in the guest operating system (running ...
- 8,516