Questions tagged [yubikey]
The yubikey tag has no usage guidance.
35
questions
0
votes
0answers
9 views
How to use FIDO key with Firefox on Windows?
When I try to add a security key to GitHub account, instead of a prompt to press the button on my YubiKey I get Windows Hello PIN prompt. Once I confirm that, GitHub seems to think that I registered a ...
0
votes
0answers
20 views
ssh-add -s Win10
I am unable to add my card using ssh-add -s on Windows 10, ssh-agent is running. Getting below error: C:\Program Files\Yubico\Yubico PIV Tool\bin>ssh-add -s libykcs11.dll
Enter passphrase for PKCS#...
1
vote
0answers
163 views
Bitlocker Full Drive Encryption with YubiKey
I'd like to secure the hard discs of a new Windows 10 (Pro/Enterprise) PC with BitLocker full disc encryptuon using hardware tokens and PIN (real 2FA).
How can I set up a YubiKey so I can use it as ...
0
votes
0answers
12 views
What are these YubiKey key files?
I have a YubiKey Nano which I can touch to log in.
In /etc/u2f_mappings it says
johndoe:c5433a8aca891fe4333588c7454004983d65f787243eaa5bbce29a6239af13a8,...
0
votes
0answers
99 views
Yubikey 4: use for 2 factor authentication for UAC - Administrator approvals - as well as for 2FA Yubico's own computer login tool Windows 10
Yubikey 5 does not yet support windows Hello for passwordless logon: so I have setup yubikey 4 to work as two factor authentication for windows 10 logon. This is achieved by using a Local Account - it ...
0
votes
0answers
27 views
Use a custom PAM authentication service with Polkit
Problem
It looks like there is a hardcoded PAM service - polkit-1 - that polkit uses for authentication:
rc = pam_start ("polkit-1", // <--- here
user_to_auth,
...
0
votes
0answers
29 views
Specifying gpg-agent IdentityAgent in Windows SSH config
I recently got a pair of Yubikeys, and I've been spending most of today trying to set them up to work with SSH. I finally managed to get them working from my Linux machine, but I'd also like to have ...
0
votes
0answers
12 views
Multiple hardware devices with SSH and GPG agent
The SSH_AUTH_SOCK environment variable allows you to specify the socket path that can be used to talk to your hardware device like your Yubikey, secure enclave or other smart card.
My dilemma is that ...
0
votes
0answers
20 views
Configured Yubikey Not Generating OTP on macOS Catalina
Yubikey : 4C Nano
OS : macOS Catalina
Issue
Trying to reuse a Yubikey.
Configured 2 Yubikey OTP slots using Yubikey Manger App.
Tried to validate OTP functionality by following steps in
https://demo....
0
votes
0answers
48 views
Yubikey as 2nd Factor to open luks-encrypted disk on OpenSuse
How do I set up a Yubikey as a 2nd factor, in addition to my password, to open my LUKS-encrypted disk on Opensuse? All the information I've found so far seem to be geared at Arch Linux and Debian and ...
0
votes
1answer
1k views
gpg: decryption failed: No secret key
First, I spent an hour trying answers with similar titles so please read this through before flagging this question as a duplicate.
I use a YubiKey to store my PGP private key using its smart card ...
0
votes
1answer
180 views
Mac GPG can't generate smartcard keys
Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4
% gpg --card-edit
Reader ...........: Yubico YubiKey OTP FIDO CCID
Application ID ...: ...
0
votes
0answers
39 views
How can I get Kleopatra to recognize my Yubikey on boot?
I have GPG4Win installed, and I use git bash for most of my development work on Windows (I prefer Linux or Mac, but our application needs to be tested in Windows, so sometimes I'm restricted to ...
2
votes
1answer
688 views
SSH server asking for password, but PasswordAuthentication is disabled
what you will see is the current state of a problem I am trying to solve.
I restarted sshd before filling the body this question.
What I am trying to do:
I need to use ssh keys with a yubikey ...
1
vote
0answers
433 views
Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?
Yubikey as SmartCard
I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the ...
1
vote
1answer
107 views
Preventing Win 10 from automatically installing certificates from smart cards
A short background on the issue. I have a Yubikey 5 with PIV containing 3 personal certificates. One of the certificates is also installed locally on my Win 10 machine. All the certificates contain ...
1
vote
1answer
350 views
Yubikey with Kleopatra on Windows 10
I have a Yubikey 4C Nano that I use with Linux and MacOS without issue. Recently, I installed a version of Windows on my macbook pro that allows me to dual-boot (so I can run the windows version of ...
0
votes
0answers
57 views
Strong encryption for a local file (PGP)
Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site.
I am looking for a safe method to encrypt a local file on my machine. Let's ...
1
vote
1answer
203 views
yubikey/gpg-agent always asking for my PIN when running git commit
recently, git has been asking me for my yubikey pin every 3 or 4 times after i've already typed in my pin. this didn't use to happen before. i'm thinking maybe the card isn't getting read correctly or ...
0
votes
1answer
26 views
Yubikey FIPS Approved Mode
I'm having issues getting my Yubikey FIPS version to unlock and exit the FIPS approved mode.
You can see below that I first put the yubikey into fips mode by setting an admin pin. Then, I ...
3
votes
0answers
415 views
Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?
Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
-1
votes
1answer
385 views
Using ssh key on Yubikey on Sourcetree program
I can not make sourcetree work with the ssh key that i have in my yubikey.
Does anybody know how can i fix it?
Thank you.
P.D: I have tried different recommendations that i found on the internet, ...
0
votes
1answer
150 views
make .ssh/id_rsa read key from yubikey
I have my ssh keys within a yubikey, I use gpg-agent.conf with something like this:
pinentry-program /usr/local/bin/pinentry-mac
enable-ssh-support
default-cache-ttl 60
max-cache-ttl 120
This helps ...
0
votes
1answer
210 views
How do I get windows applications to recognize my yubikey?
I have successfully used my Yubikey to get my Chrome and Firefox browsers to get my 2-Step Verification to work with my Google account. Unfortunately, I have a few windows applications which I cannot ...
1
vote
1answer
414 views
Programmatically unlock PIV slot 9a with OpenSC for another application
I'm using a Yubikey 4 with a certificate loaded in PIV slot 9a (PIV Authentication; OpenSC slot 0).
Inside Firefox 64, I am using the OpenSC PKCS#11 driver.
What I want to accomplish is to "unlock" ...
0
votes
1answer
1k views
Sharing Yubikey between host and VMWare
I have a Yubikey 4 working on my Win10 host machine, but also want to use in my VMWare Workstation 12 Win7 session.
At first, connecting to the shared Yubico device failed, because Windows could not ...
0
votes
1answer
392 views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
1
vote
1answer
443 views
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
4
votes
1answer
3k views
Scdaemon won't detect Yubikey on Windows 10
This has recently started after I updated to Windows 10 1803 (x64). I have updated Gpg4Win to the latest version (3.1.2), but this has not fixed anything.
I have tried the following:
Remove the ...
2
votes
1answer
884 views
Which pam module is used for gnome admin password requests?
I have added the yubikey pam module to my sudo pam config, and I like the results—no one can get superuser access through sudo or su without a yubikey.
Setting aside the fact that this is possibly ...
1
vote
0answers
51 views
GPG should fail silently when external card is not inserted, instead of asking over and over
I'm running Linux.
I have a Yubikey 4, where my GPG subkeys are stored. On the computer, gpg-agent transparently uses these keys.
The problem is when I don't have my Yubikey inserted. If anything ...
0
votes
2answers
356 views
What security key specification is needed for WebAuthN compatibility?
Is it already possible to buy a buy a USB-pendrive-style authentication key that is compatible with WebAuthN?
If yes, what technical standard/specification should it support?
According to press ...
1
vote
1answer
2k views
Yubikey 4 not working (Linux & Windows)
I received a Yubikey 4 a few days ago. I got it along a special WIRED Magazine offer. The problem with the key is, that it is not recognized neither by Windows 10, nor by Linux (Mint 18).
Linux
When ...
6
votes
2answers
9k views
How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?
I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10:
I created the keys according to this:
gpg --card-status
Reader ...........: Yubico ...
4
votes
2answers
3k views
Unable to get yubikey neo u2f working in Linux inside of VMWare Workstation
I am unable to get my YubiKey Neo U2F working in VMWare Workstation Pro 12.5. Testing it against Yubico's test site or against Akisec's test site both fail in the guest operating system (running ...
