Questions tagged [yubikey]
The yubikey tag has no usage guidance.
35
questions
35
votes
4
answers
45k
views
Yubikey Two-factor Authentication Full-disk Encryption via LUKS
I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
- 3,056
20
votes
4
answers
22k
views
Passwordless login with Yubikey 5 NFC
I just bought a Yubikey 5 NFC and have set it up per their instructions on Ubuntu 19.04. But my preferred use case is to use the key as passwordless option (if it's plugged in; allow access - if it's ...
- 549
14
votes
2
answers
19k
views
Use of Yubikey Neo for login 2FA and lock screen
I want to use my Yubikey Neo to login to Ubuntu 14.04. In addition, it would be convinient if the screen is locked automatically everytime I unplug the Yubikey.
- 493
11
votes
1
answer
1k
views
Why can't I use my FIDO keys for logins in Firefox anymore?
My YubiKey always was an easy safe way to log in to various websites, but last week this stopped working: the website asks me to use the security key, Firefox shows a dialog asking to touch the button ...
- 1,106
10
votes
2
answers
3k
views
How do I use a Yubikey NEO in 14.04 to log into a Google account through Chrome?
How do I make Ubuntu 14.04 recognize a Yubikey NEO for Google account authentication?
I have yubikey NEO and Chrome version 46.0.2490.80.
I have used the key successfully on a laptop running Windows ...
- 224
6
votes
1
answer
16k
views
How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?
The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
- 303
6
votes
2
answers
2k
views
Ubuntu 17.10, Yubikey Neo udev rules not triggering
I've got Ubuntu 17.10 installed on a mid-2011 iMac. On a Dell XPS 15 laptop I was able to set up my Yubikey (via udev rules) to activate & deactivate the screensaver when the Yubikey was unplugged ...
- 81
4
votes
1
answer
7k
views
How to install Yubikey personalization tool on Ubuntu
How to install binary version of https://www.yubico.com/support/downloads for Ubuntu. I'm using 14.04 LTS.
[edit]
Also how to fix "An unexpected error has occurred" in Google Account
- 348
3
votes
2
answers
1k
views
Yubikey on multiple LUKS drives
I have the following LUKS partitions:
root@precision:~# blkid | grep crypto_LUKS
/dev/nvme0n1p3: UUID="e1ac241d-a91c-4386-9b08-752dc5d0e9b8" TYPE="crypto_LUKS" PARTUUID="...
- 203
2
votes
2
answers
2k
views
Locked out from system after adding Yubikey 2FA
I followed the official Yubico guide to enable Challenge-Response 2FA on my account, However on a reboot the login prompts for the Yubikey, then asks for my password, and then repeats these 2 prompts ...
- 303
2
votes
2
answers
3k
views
Using a Yubikey with LUKS on Removable Storage
I'm trying to use a Yubikey 4 as a second factor to access a LUKS-encrypted USB HDD. Here's how far I've gotten:
I'm using yubikey-luks to add my HMAC-SHA1 hashed password to slot 7 of the device.
...
2
votes
2
answers
3k
views
Yubikey 2FA does not work on Ubuntu 22.04 Firefox from apt
I have set up a web page access with two-factor authentication. Using Firefox installed via Snap, I have been able to access my account. The flow is like this: The web page asks for username and ...
- 291
2
votes
1
answer
875
views
Apparmor enforce mode prevents Firefox from reading U2F security key
When the default apparmor profile for Firefox is set to enforce mode, it blocks access to security keys. Disabling the profile restores access.
Rules that I've tried and failed:
/sys/devices/** r,
#...
- 123
2
votes
1
answer
75
views
Log in to Ubuntu with 2 factor
I recently purchased a Yubikey and I would like to use it to log into my computer. A quick Google search turned up nothing obviously useful to me. I am running Ubuntu 14.10; does anyone know of a way ...
- 1,063
2
votes
0
answers
100
views
How to configure a prompt/notice to touch the YubiKey when it's used for sudo
I have configured
auth sufficient pam_u2f.so cue [cue_prompt=Tap the Yubikey to sudo]
in /etc/pam.d/sudo to be able to sudo by touching my YubiKey. When running a script it might be easy to miss the ...
- 6,260
2
votes
0
answers
96
views
How to select the gpg agent used for ssh and other things?
I want to use qubes-gpg-client instead of the default gpg-agent that comes on ubuntu.
How can I make it such that ssh and other things always use this custom agent instead of the default one?
- 913
2
votes
0
answers
479
views
pam_tally2 is counting successful logins as failures while using Yubikey
I'm using Yubikey's U2F feature as a second factor to login on Ubuntu 20.04 as described here:
https://support.yubico.com/support/solutions/articles/15000011356-ubuntu-linux-login-guide-u2f
However, ...
- 162
2
votes
0
answers
247
views
ssh-add does not see PGP key
I have my PGP key on my YubiKey and it works well on my MacBook, but it isn't working correctly on my Ubuntu 18.04 laptop. I am able to use gpg --card-status and it correctly shows the key along with ...
- 21
2
votes
0
answers
515
views
pam_oath + yubikey: can login with yubikey but not unlock lockscreen
I'm using pam_oath.so from the libpam_oath package to use my yubikey to login. Its configured as OATH-HOTP and it's working fine. I can login with my pin and a press on my yubikey. I dont need to ...
- 21
1
vote
1
answer
2k
views
Yubikey Two-factor Authentication Encryption via LUKS - Spare Yubikeys how to create an additional key
My main question is how to create an additional key (instructions Yubikey Two-factor Authentication Full-disk Encryption via LUKS ) to use if I lost the key. Should I create an additional new code on ...
- 11
1
vote
0
answers
38
views
Brave snap only recognizes yubikey after re-inserting it
Really annoying, but my brave (snap) install will only use my yubikey after I re-insert it after starting brave.
Chrome (installed as deb) works flawless, so I assume it has something to do with the ...
- 253
1
vote
0
answers
290
views
Alternatives to sudo's password prompt?
I know sudo can be setup with NOPASSWD so that it will not ask for a password when executed.
This is more of a security for a person with ADHD/ADD rather than 'best security' - I understand the false ...
- 446
1
vote
1
answer
108
views
use github with yubikey without phone
I am using Xubuntu 18.04 and wonder if there is a way to use Two-factor authentication with github but without a phone. Currently I need to enter the verification number that is shown on my phone/nfc/...
- 315
1
vote
1
answer
2k
views
Sudo Broken - critical error PAM
I just got a Yubikey and tried to set it up to use it to login to my computer.
I followed the instructions by hackerb9 in this post.
Passwordless login with Yubikey 5 NFC
It worked perfectly, but I ...
- 11
0
votes
1
answer
2k
views
How can I disable Yubikey's OTP?
I'm using a Yubikey and it is going wild: because of a bad contact, it relentlessly types every 3 seconds a code like this one on my interface:
cccjgjgkhcbbirdrfdnlnghhfgrtnnlgedjlftrdafe
How can I ...
- 688
0
votes
1
answer
2k
views
Yubikey + VMware Horizon + Windows Remote Desktop
I use my personal computer with Ubuntu 20.04 to connect to my work Windows 10 client via VMware Horizon (Digital Workspace). I have accounts that use Yubikeys as smart cards. The Yubikeys are attached ...
- 11
0
votes
0
answers
17
views
remove time lock with yubikey
Ubuntu 23.10:
After 5 incorrect password entries, the entry is blocked for a certain period of time. I would like to be able to remove this time lock with the yubikey so that I can enter a password ...
- 1
0
votes
0
answers
1k
views
Initial Ubuntu Server 22.04.2 LTS Install - LUKS - headless/remote decrypt
Installing Ubuntu Server 22.04.2 LTS for the first time ever on a Beelink Mini PC (SEi12). Went for the most standard installation possible. Configured using a guided storage layout; i.e.
Use entire ...
- 1
0
votes
1
answer
970
views
Accidentally uninstalled GUI when removing Pipewire
I was having sound issues (previous question), and after a lot of reading heard of the much-touted PipeWire.
I followed this helpful guide to install PipeWire. This only made things worse, as now ...
- 21
0
votes
0
answers
62
views
Encrypt hard disc on ubuntu server 18.04 with luks and yubikey
This https://askubuntu.com/a/599826/1068251 do not work for ubuntu server 18.04.
Ubuntu ask about touching yubikey and repeat again question. I can login only with passphrase.
I found other solution ...
- 137
0
votes
0
answers
254
views
Just installed Yubico Yubikey for multifactor autentication and my MS Hotmail account in Evolution is suddenly failing authentication
I have just installed Yubikey and the authentication works for everything except now I have an authentication issue with my MS Hotmail account in Gnome evolution. I have uninstalled and re-added the ...
0
votes
1
answer
2k
views
How do I set Ubuntu to unlock screensaver with Yubikey
When I have this key:
https://support.yubico.com/support/solutions/articles/15000006900-security-key-by-yubico
I would like to use it to lock the screen when I pull it out and go away from computer ...
0
votes
1
answer
327
views
Ubuntu 16.04: How to update YubiKey Personalization Tool (GUI) with latest library?
I have a new Yubikey 4 with firmware v4.3.5.
I've downloaded YubiKey Personalization Tool v3.1.24 (here), moved it to my offline machine and compiled it after I've installed all needed .deb-files (...
- 210
0
votes
1
answer
470
views
filter PAM_yubico.so debug stdout
I want to use the yubico-pam module (https://github.com/Yubico/yubico-pam) to enable challenge-response authentification using my yubikey when sudoing. I've managed to do that by adding the line
...
- 151
-1
votes
1
answer
160
views
If Yubikey with 2 factor auth is used on Ubuntu 19.04 can the OS be hacked via bluetooth? Or any other way remotely?
I have had issues with Ubuntu being hacked, I recently added a Yubikey with 2-factor authentication and encrypted the OS via LUKs. Is there any way that a hacker could breach my system via Bluetooth ...
- 208