Super User Stack Exchange
Super User Stack Exchange

Questions tagged [fido2]

11 questions
2
votes
0 answers

Is it possible to disable Windows Hello trying to be my FIDO2 credential?

Sometimes when I try to register using FIDO2, windows asks me for my Windows Hello PIN so that it can authenticate me. Windows Hello asking for a PIN: AFAIK this is windows offering to be a "Platform Credential", as-in, the FIDO2 credential is…
Gunni
  • 29
  • 1
2
votes
1 answer

Can a website detect if the same physical FIDO key is used for multiple accounts?

If I have an account, say with google, and only use that account from location A, using device A, and another google account only used with device B in location B, if I used the same 2fa FIDO key for both accounts, would google have any way of…
user1710978
  • 21
  • 1
1
vote
3 answers

Force Use of Hardware Security Key with a Windows Hello Account

Question: Is it possible to bypass Windows Hello (Pin) on a Windows 11 login tied tied to a Microsoft passwordless account? Why? Want to force use of a hardware security key for authentication. I have a Microsoft passwordless account on the…
CyberMedics.org
  • 11
  • 3
1
vote
0 answers

Error when register Yubikey Bio with website

I am having an issue registering a yubikey bio with a website. I have managed to register a Yubikey 5 series with the website without issue however when I try with the Yubikey bio I get an error like the one below (it occurs in both edge and…
John554
  • 83
  • 5
1
vote
1 answer

What is the cryptographic relationship between an ssh key and my Yubikey?

I am curious what is the cryptographic relationship between the generated ssh private (and public) key when I use my Yubikey to add an extra layer of protection. Does ssh-keygen write anything into the Yubikey itself or just communicate with it? If…
Halacs
  • 133
  • 6
0
votes
0 answers

No passkey icon option on Windows 10

I am trying to enable passkey login on Windows 10 devices. I have enabled UseSecurityKeyForSignin and EnableFIDODeviceLogon as well as enabled WHfB in gpedit.msc According to RSOP, passkey login is enabled, WHfB is enabled, yet the logon page does…
Mike
  • 1
0
votes
1 answer

What are the risks of using a FIDO U2F USB key like Google's Titan with a hacked computer?

What are the risks of sticking a FIDO U2F USB key like Google's Titan into a computer that is hacked? The hacking I am thinking about is unauthorized access and control over an operating system. In this case, the hacker who stealthily can control…
u20210512
  • 109
  • 1
  • 8
0
votes
0 answers

Can I use an iPhone connected via USB to a computer as a FIDO2 security key (for example in OpenSSH)?

In the same way that I can use a Yubikey or any other FIDO2 hardware key to store resident keys for use with OpenSSH (for example ssh-keygen -t ed25519-sk -O resident -O verify-required) I would like to use my iPhone. I have my iPhone most of the…
cs224
  • 101
  • 1
0
votes
0 answers

Why does Windows *require* User Verification when registering WebAuthn?

During WebAuthn registration in Windows, why does Windows require User Verification, even when the Relying Party does not specify the User Verification requirement, or specifies it as preferred? Is it possible to change OS settings in order to allow…
Minute-Slice8546
  • 1
  • 1
0
votes
1 answer

Windows is asking for a PIN when I use FIDO device

When I try to use my Yubico 5 NFC FIDO key to authenticate on any portal, Windows opens a Windows Security dialog asking for a PIN. I don't remember having created a PIN. I can't find it when trying now, but there was an option for forgetting the…
Hikari
  • 307
  • 7
  • 25
0
votes
0 answers

FIDO2 Security Key login annoyance with Windows 10/11 and Azure AD

I've a few Windows 10 and Windows 11 machines that are, like I/my account is, joined my Azure AD and I use my FIDO2 keys (Yubikey Bio and also Kensington Verimark Guards) to log in BUT I have noticed one anoyance with both, Windows 10 and Windows…
Jörg Battermann
  • 1,063
  • 3
  • 10
  • 13