Questions tagged [yubikey]
53 questions
26
votes
3 answers
Set Default Security Key Settings (Windows 11)
As of the latest Windows Insider Build (Dev Channel), 23541.1000 ni_prerelease, the following appears when Windows is prompted for security key input:
Whereas before this update, it was only Security key, and would automatically start the prompt…
David
- 505
6
votes
1 answer
Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?
Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain', so that I just have to use 'TouchID' rather…
OJFord
- 641
6
votes
2 answers
How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?
I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10:
I created the keys according to this:
gpg --card-status
Reader ...........: Yubico Yubikey 4 OTP U2F CCID 0
Application ID ...:…
burnersk
- 488
5
votes
2 answers
How to disable OpenSC YubiKey password prompt in Firefox
I have a YubiKey nano plugged into a 2019 MacBook Pro.
When I visit some websites (one public example being Gmail), Firefox brings up a password dialog prompting me to enter the YubiKey password. Gmail has nothing to do with my YubiKey. Also, I…
Jay Taylor
- 307
5
votes
1 answer
Scdaemon won't detect Yubikey on Windows 10
This has recently started after I updated to Windows 10 1803 (x64). I have updated Gpg4Win to the latest version (3.1.2), but this has not fixed anything.
I have tried the following:
Remove the Minidriver…
vagaerg
- 373
4
votes
1 answer
YubiKey 5C NFC not recognized on Silicon MacBook with macOS Sonoma (14.6.1)
I am trying to get a recently bought YubiKey 5C NFC to work on my MacBook (16", Nov. 2023, Apple M3 Max processor) with macOS Sonoma (14.6.1) installed.
After plugging the Yubikey in it flashes a few times and then goes dormant. I tried to create a…
herzbube
- 293
4
votes
2 answers
Yubikey ssh authentication fails with "signing failed for ECDSA-SK"
I have a Yubikey (Security Key NFC by Yubico) that I'm trying to set up on a Linux machine for SSH authentication in Discoverable keys mode. I've followed this tutorial and created the keys with
ssh-keygen -t ecdsa-sk -O resident -O…
user134167
- 73
4
votes
1 answer
yubikey/gpg-agent always asking for my PIN when running git commit
recently, git has been asking me for my yubikey pin every 3 or 4 times after i've already typed in my pin. this didn't use to happen before. i'm thinking maybe the card isn't getting read correctly or is getting disconnected somehow. it's become…
reuel
- 41
4
votes
1 answer
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original Yubico guide (Android, MacOS), which confuses…
burnersk
- 488
4
votes
2 answers
Unable to get yubikey neo u2f working in Linux inside of VMWare Workstation
I am unable to get my YubiKey Neo U2F working in VMWare Workstation Pro 12.5. Testing it against Yubico's test site or against Akisec's test site both fail in the guest operating system (running Debian Linux 9), but both work in the host operating…
ChrisInEdmonton
- 8,796
3
votes
0 answers
Can't set up GPG with Yubikey on WSL
I'm trying to set up a YubiKey via gpg using WSL Ubuntu on Windows, but I get error:
$ gpg --card-status
gpg: selecting card failed: Service is not running
gpg: OpenPGP card not available: Service is not running
All of these result in…
Victor
- 31
3
votes
1 answer
SSH server asking for password, but PasswordAuthentication is disabled
what you will see is the current state of a problem I am trying to solve.
I restarted sshd before filling the body this question.
What I am trying to do:
I need to use ssh keys with a yubikey combined to secure authentication to SSH.
I need to…
ungeblauscht
- 101
3
votes
1 answer
Which pam module is used for gnome admin password requests?
I have added the yubikey pam module to my sudo pam config, and I like the results—no one can get superuser access through sudo or su without a yubikey.
Setting aside the fact that this is possibly excessive security for a personal machine, I am…
Mike D
- 133
2
votes
1 answer
"Passkey can’t be created on this device” error with a Google FIDO2 key on Chrome?
Trying to set up a YubiKey as a backup for my Google account in case I lose my phone. Attempting to set up FIDO2 authentication into my Google Account with a FIDO2 key. My key is for my desktop via USB-C. Creating the key on my Chrome Browser gives…
2
votes
0 answers
How to use a Yubikey / FIDO2 device / ed25519-sk key with ssh-agent on MacOS (15.3+)
Please note: solutions involving either disabling or modifying the inbuilt ssh-agent are unlikely to work. I've seen numerous people suggest this is due to recent changes in MacOS (I'm on 15.3), but can't prove that. Example: this doesn't work, the…
Philip Couling
- 339