Questions tagged [yubikey]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

How to use FIDO key with Firefox on Windows?

When I try to add a security key to GitHub account, instead of a prompt to press the button on my YubiKey I get Windows Hello PIN prompt. Once I confirm that, GitHub seems to think that I registered a ...
0
votes
0answers
20 views

ssh-add -s Win10

I am unable to add my card using ssh-add -s on Windows 10, ssh-agent is running. Getting below error: C:\Program Files\Yubico\Yubico PIV Tool\bin>ssh-add -s libykcs11.dll Enter passphrase for PKCS#...
1
vote
0answers
163 views

Bitlocker Full Drive Encryption with YubiKey

I'd like to secure the hard discs of a new Windows 10 (Pro/Enterprise) PC with BitLocker full disc encryptuon using hardware tokens and PIN (real 2FA). How can I set up a YubiKey so I can use it as ...
0
votes
0answers
12 views

What are these YubiKey key files?

I have a YubiKey Nano which I can touch to log in. In /etc/u2f_mappings it says johndoe:c5433a8aca891fe4333588c7454004983d65f787243eaa5bbce29a6239af13a8,...
0
votes
0answers
99 views

Yubikey 4: use for 2 factor authentication for UAC - Administrator approvals - as well as for 2FA Yubico's own computer login tool Windows 10

Yubikey 5 does not yet support windows Hello for passwordless logon: so I have setup yubikey 4 to work as two factor authentication for windows 10 logon. This is achieved by using a Local Account - it ...
0
votes
0answers
27 views

Use a custom PAM authentication service with Polkit

Problem It looks like there is a hardcoded PAM service - polkit-1 - that polkit uses for authentication: rc = pam_start ("polkit-1", // <--- here user_to_auth, ...
0
votes
0answers
29 views

Specifying gpg-agent IdentityAgent in Windows SSH config

I recently got a pair of Yubikeys, and I've been spending most of today trying to set them up to work with SSH. I finally managed to get them working from my Linux machine, but I'd also like to have ...
0
votes
0answers
12 views

Multiple hardware devices with SSH and GPG agent

The SSH_AUTH_SOCK environment variable allows you to specify the socket path that can be used to talk to your hardware device like your Yubikey, secure enclave or other smart card. My dilemma is that ...
0
votes
0answers
20 views

Configured Yubikey Not Generating OTP on macOS Catalina

Yubikey : 4C Nano OS : macOS Catalina Issue Trying to reuse a Yubikey. Configured 2 Yubikey OTP slots using Yubikey Manger App. Tried to validate OTP functionality by following steps in https://demo....
0
votes
0answers
48 views

Yubikey as 2nd Factor to open luks-encrypted disk on OpenSuse

How do I set up a Yubikey as a 2nd factor, in addition to my password, to open my LUKS-encrypted disk on Opensuse? All the information I've found so far seem to be geared at Arch Linux and Debian and ...
0
votes
1answer
1k views

gpg: decryption failed: No secret key

First, I spent an hour trying answers with similar titles so please read this through before flagging this question as a duplicate. I use a YubiKey to store my PGP private key using its smart card ...
0
votes
1answer
180 views

Mac GPG can't generate smartcard keys

Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4 % gpg --card-edit Reader ...........: Yubico YubiKey OTP FIDO CCID Application ID ...: ...
0
votes
0answers
39 views

How can I get Kleopatra to recognize my Yubikey on boot?

I have GPG4Win installed, and I use git bash for most of my development work on Windows (I prefer Linux or Mac, but our application needs to be tested in Windows, so sometimes I'm restricted to ...
2
votes
1answer
688 views

SSH server asking for password, but PasswordAuthentication is disabled

what you will see is the current state of a problem I am trying to solve. I restarted sshd before filling the body this question. What I am trying to do: I need to use ssh keys with a yubikey ...
1
vote
0answers
433 views

Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?

Yubikey as SmartCard I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the ...
1
vote
1answer
107 views

Preventing Win 10 from automatically installing certificates from smart cards

A short background on the issue. I have a Yubikey 5 with PIV containing 3 personal certificates. One of the certificates is also installed locally on my Win 10 machine. All the certificates contain ...
1
vote
1answer
350 views

Yubikey with Kleopatra on Windows 10

I have a Yubikey 4C Nano that I use with Linux and MacOS without issue. Recently, I installed a version of Windows on my macbook pro that allows me to dual-boot (so I can run the windows version of ...
0
votes
0answers
57 views

Strong encryption for a local file (PGP)

Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site. I am looking for a safe method to encrypt a local file on my machine. Let's ...
1
vote
1answer
203 views

yubikey/gpg-agent always asking for my PIN when running git commit

recently, git has been asking me for my yubikey pin every 3 or 4 times after i've already typed in my pin. this didn't use to happen before. i'm thinking maybe the card isn't getting read correctly or ...
0
votes
1answer
26 views

Yubikey FIPS Approved Mode

I'm having issues getting my Yubikey FIPS version to unlock and exit the FIPS approved mode. You can see below that I first put the yubikey into fips mode by setting an admin pin. Then, I ...
3
votes
0answers
415 views

Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?

Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
-1
votes
1answer
385 views

Using ssh key on Yubikey on Sourcetree program

I can not make sourcetree work with the ssh key that i have in my yubikey. Does anybody know how can i fix it? Thank you. P.D: I have tried different recommendations that i found on the internet, ...
0
votes
1answer
150 views

make .ssh/id_rsa read key from yubikey

I have my ssh keys within a yubikey, I use gpg-agent.conf with something like this: pinentry-program /usr/local/bin/pinentry-mac enable-ssh-support default-cache-ttl 60 max-cache-ttl 120 This helps ...
0
votes
1answer
210 views

How do I get windows applications to recognize my yubikey?

I have successfully used my Yubikey to get my Chrome and Firefox browsers to get my 2-Step Verification to work with my Google account. Unfortunately, I have a few windows applications which I cannot ...
1
vote
1answer
414 views

Programmatically unlock PIV slot 9a with OpenSC for another application

I'm using a Yubikey 4 with a certificate loaded in PIV slot 9a (PIV Authentication; OpenSC slot 0). Inside Firefox 64, I am using the OpenSC PKCS#11 driver. What I want to accomplish is to "unlock" ...
0
votes
1answer
1k views

Sharing Yubikey between host and VMWare

I have a Yubikey 4 working on my Win10 host machine, but also want to use in my VMWare Workstation 12 Win7 session. At first, connecting to the shared Yubico device failed, because Windows could not ...
0
votes
1answer
392 views

Signing a message with a SmartCard / Yubikey

So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4. Now, on a fresh setup, I want to try and use those keys, to sign something....
1
vote
1answer
443 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
4
votes
1answer
3k views

Scdaemon won't detect Yubikey on Windows 10

This has recently started after I updated to Windows 10 1803 (x64). I have updated Gpg4Win to the latest version (3.1.2), but this has not fixed anything. I have tried the following: Remove the ...
2
votes
1answer
884 views

Which pam module is used for gnome admin password requests?

I have added the yubikey pam module to my sudo pam config, and I like the results—no one can get superuser access through sudo or su without a yubikey. Setting aside the fact that this is possibly ...
1
vote
0answers
51 views

GPG should fail silently when external card is not inserted, instead of asking over and over

I'm running Linux. I have a Yubikey 4, where my GPG subkeys are stored. On the computer, gpg-agent transparently uses these keys. The problem is when I don't have my Yubikey inserted. If anything ...
0
votes
2answers
356 views

What security key specification is needed for WebAuthN compatibility?

Is it already possible to buy a buy a USB-pendrive-style authentication key that is compatible with WebAuthN? If yes, what technical standard/specification should it support? According to press ...
1
vote
1answer
2k views

Yubikey 4 not working (Linux & Windows)

I received a Yubikey 4 a few days ago. I got it along a special WIRED Magazine offer. The problem with the key is, that it is not recognized neither by Windows 10, nor by Linux (Mint 18). Linux When ...
6
votes
2answers
9k views

How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?

I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10: I created the keys according to this: gpg --card-status Reader ...........: Yubico ...
4
votes
2answers
3k views

Unable to get yubikey neo u2f working in Linux inside of VMWare Workstation

I am unable to get my YubiKey Neo U2F working in VMWare Workstation Pro 12.5. Testing it against Yubico's test site or against Akisec's test site both fail in the guest operating system (running ...