Super User
Super User

Questions tagged [u2f]

Questions related to the Universal 2nd Factor U2F protocol.

Universal 2nd Factor

15 questions
4
votes
3 answers

SSH Authentication with Fido2 / Yubico Security Key

I was wondering if it is possible to use FIDO2 to authenticate against an ssh server. There are many tutorials explaining how to use GPG and the newer Yubikeys for ssh auth, but i do not find any information on if it is possible or how it is…
Chris
  • 141
4
votes
2 answers

Unable to get yubikey neo u2f working in Linux inside of VMWare Workstation

I am unable to get my YubiKey Neo U2F working in VMWare Workstation Pro 12.5. Testing it against Yubico's test site or against Akisec's test site both fail in the guest operating system (running Debian Linux 9), but both work in the host operating…
ChrisInEdmonton
  • 8,796
3
votes
0 answers

Google Advanced Protection on macOS Sierra, Internet Accounts is broken

I recently signed up for Google Advanced Protection & enabled it using my MacBook running macOS Sierra, 10.12.6. Periodically I get notices from Internet Accounts to sign into Google, except I can't. I enter my account name & password then a…
scalefree
  • 31
2
votes
1 answer

How to test a FIDO U2F USB token on the command line?

How can I speak the UAF (Universal Authentication Framework) and/or U2F (Universal Second Factor) = CTAPI protocols on the Linux cmdline ?
Juergen
  • 666
2
votes
1 answer

A Windows Hello Security Key has been added to my PC even though I don't have one

I have a Windows 10 PC linked to my Microsoft Account. For an unknown reason, most of my settings are now locked and require me to insert a security key to access them. To name a few: The lock screen requires either a security key or the full…
Ziad Akiki
  • 125
2
votes
3 answers

udev rule to lock session on removal of hid key

I am trying to lock the session on removal of my hid device which is HyperFIDO U2F key. However after trying for many times I got no success. I tried to create a udev rule on /etc/udev/rules.d/50-lockscreen.rules which looks like…
dkbhadeshiya
  • 121
1
vote
1 answer

How can I use a U2F hardware authenticator to unlock a SSH key in a computer I am SSH'd into?

I have a number of computers on which I've generated a ed25519-sk SSH key all using the same U2F hardware authenticator (yubikey 5C NFC). I'm now in a situation involving three computers: X, Y, and Z. I have physical possession of computer X, along…
ahelwer
  • 123
1
vote
0 answers

How do I generate or use a U2F SSH key on Windows?

I have a security key that, when I plug it into an Ubuntu 20.04 host, can be used to generate a sk-ecdsa-sha2-nistp256@openssh.com key like this: ssh-keygen -t ecdsa-sk cat ~/.ssh/id_ecdsa_sk.pub How do I get the same result from a Windows machine…
VerdantOzark
  • 3,343
  • 3
  • 17
  • 16
1
vote
0 answers

OpenSSH 8.2 PubkeyAcceptedKeyTypes - bad key types for FIDO/U2F in sshd_config

Recently updated to OpenSSH 8.2 on both client (Ubuntu Desktop 18.04) and server (Ubuntu Server 18.04) in order to test the new FIDO/U2F token functionality. Currently running into an issue when updating my server's /etc/sshd_config. I updated…
chrislaw
  • 11
1
vote
1 answer

Yubikey FIPS Approved Mode

I'm having issues getting my Yubikey FIPS version to unlock and exit the FIPS approved mode. You can see below that I first put the yubikey into fips mode by setting an admin pin. Then, I immediately try to unlock the key (to take it out of FIPS…
John
  • 21
  • 2
1
vote
1 answer

Yubikey 4 not working (Linux & Windows)

I received a Yubikey 4 a few days ago. I got it along a special WIRED Magazine offer. The problem with the key is, that it is not recognized neither by Windows 10, nor by Linux (Mint 18). Linux When I execute sudo lsusb -d 058b:004c -v, the key is…
themole
  • 365
0
votes
1 answer

What are the risks of using a FIDO U2F USB key like Google's Titan with a hacked computer?

What are the risks of sticking a FIDO U2F USB key like Google's Titan into a computer that is hacked? The hacking I am thinking about is unauthorized access and control over an operating system. In this case, the hacker who stealthily can control…
u20210512
  • 159
  • 1
  • 2
  • 9
0
votes
1 answer

Can you list sites secured on a FIDO u2f USB key?

Is it possible to list sites (that have keys) stored on a FIDO u2f USB key? If you need to migrate TOTP accounts you can go through the list of sites on your, for example, phone app one by one. How are you supposed to remember all the accounts you…
Jamie Kitson
  • 743
0
votes
1 answer

How do I get Windows applications to recognize my YubiKey?

I have successfully used my YubiKey to get my Chrome and Firefox browsers to get my 2-step verification to work with my Google account. Unfortunately, I have a few Windows applications which I cannot get to work with my key. I enter in my user name…
BKay
  • 101
0
votes
1 answer

Where does Authlite store the second factor?

Authlite is an Active Directory extention to use second factors. They seem to have their own partition on a domain controller, and use global groups to manage their users. So the question is where do they store the second factor information for each…
Lithilion
  • 163