Ask Ubuntu Stack Exchange
Ask Ubuntu Stack Exchange

Questions tagged [yubikey]

33 questions
33
votes
4 answers

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since Yubikey version 2 it also supports HMAC-SHA1…
seanlano
  • 2,901
  • 3
  • 27
  • 44
17
votes
4 answers

Passwordless login with Yubikey 5 NFC

I just bought a Yubikey 5 NFC and have set it up per their instructions on Ubuntu 19.04. But my preferred use case is to use the key as passwordless option (if it's plugged in; allow access - if it's not; enter password). I've found some topics on…
Asitis
  • 519
  • 1
  • 4
  • 20
14
votes
2 answers

Use of Yubikey Neo for login 2FA and lock screen

I want to use my Yubikey Neo to login to Ubuntu 14.04. In addition, it would be convinient if the screen is locked automatically everytime I unplug the Yubikey.
smiddy84
  • 493
  • 1
  • 6
  • 14
10
votes
2 answers

How do I use a Yubikey NEO in 14.04 to log into a Google account through Chrome?

How do I make Ubuntu 14.04 recognize a Yubikey NEO for Google account authentication? I have yubikey NEO and Chrome version 46.0.2490.80. I have used the key successfully on a laptop running Windows 8. I'd like to use it on a few Ubuntu machines to…
DanielSank
  • 224
  • 2
  • 14
6
votes
2 answers

Ubuntu 17.10, Yubikey Neo udev rules not triggering

I've got Ubuntu 17.10 installed on a mid-2011 iMac. On a Dell XPS 15 laptop I was able to set up my Yubikey (via udev rules) to activate & deactivate the screensaver when the Yubikey was unplugged or plugged in. I've tried to set up the same thing…
Sean Hagen
  • 81
  • 1
  • 10
6
votes
1 answer

How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?

The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
Hamish W
  • 303
  • 1
  • 3
  • 16
4
votes
1 answer

How to install Yubikey personalization tool on Ubuntu

How to install binary version of https://www.yubico.com/support/downloads for Ubuntu. I'm using 14.04 LTS. [edit] Also how to fix "An unexpected error has occurred" in Google Account
Paweł Prażak
  • 348
  • 3
  • 16
3
votes
2 answers

Yubikey on multiple LUKS drives

I have the following LUKS partitions: root@precision:~# blkid | grep crypto_LUKS /dev/nvme0n1p3: UUID="e1ac241d-a91c-4386-9b08-752dc5d0e9b8" TYPE="crypto_LUKS" PARTUUID="91fc5b71-7c22-4e3e-821d-7116a5a46f7e" /dev/nvme0n1p4:…
dross
  • 183
  • 9
2
votes
0 answers

pam_oath + yubikey: can login with yubikey but not unlock lockscreen

I'm using pam_oath.so from the libpam_oath package to use my yubikey to login. Its configured as OATH-HOTP and it's working fine. I can login with my pin and a press on my yubikey. I dont need to enter my user-pw when login in to my account. But…
bernhard
  • 21
  • 3
2
votes
2 answers

Using a Yubikey with LUKS on Removable Storage

I'm trying to use a Yubikey 4 as a second factor to access a LUKS-encrypted USB HDD. Here's how far I've gotten: I'm using yubikey-luks to add my HMAC-SHA1 hashed password to slot 7 of the device. Problem: cryptsetup only challenges the yubikey on…
Christopher Richez
  • 21
  • 1
  • 5
2
votes
1 answer

Log in to Ubuntu with 2 factor

I recently purchased a Yubikey and I would like to use it to log into my computer. A quick Google search turned up nothing obviously useful to me. I am running Ubuntu 14.10; does anyone know of a way to do this? I did look at the suggested post (the…
GoProCameraByGoPro
  • 1,013
  • 2
  • 12
  • 15
2
votes
1 answer

Yubikey 2FA does not work on Ubuntu 22.04 Firefox from apt

I have set up a web page access with two-factor authentication. Using Firefox installed via Snap, I have been able to access my account. The flow is like this: The web page asks for username and password, when correctly inserted, Firefox asks me to…
Manu CJ
  • 261
  • 2
  • 7
2
votes
0 answers

How to select the gpg agent used for ssh and other things?

I want to use qubes-gpg-client instead of the default gpg-agent that comes on ubuntu. How can I make it such that ssh and other things always use this custom agent instead of the default one?
Guerlando OCs
  • 621
  • 7
  • 45
  • 85
2
votes
0 answers

pam_tally2 is counting successful logins as failures while using Yubikey

I'm using Yubikey's U2F feature as a second factor to login on Ubuntu 20.04 as described here: https://support.yubico.com/support/solutions/articles/15000011356-ubuntu-linux-login-guide-u2f However, I would like to add an extra layer of security and…
user1086913
  • 162
  • 7
2
votes
1 answer

Apparmor enforce mode prevents Firefox from reading U2F security key

When the default apparmor profile for Firefox is set to enforce mode, it blocks access to security keys. Disabling the profile restores access. Rules that I've tried and failed: /sys/devices/** r, #include dbus send bus=system…
Eric L
  • 123
  • 5
1
2 3