Ask Ubuntu
Ask Ubuntu

Questions tagged [yubikey]

41 questions
35
votes
4 answers

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since Yubikey version 2 it also supports HMAC-SHA1…
seanlano
  • 3,086
21
votes
4 answers

Passwordless login with Yubikey 5 NFC

I just bought a Yubikey 5 NFC and have set it up per their instructions on Ubuntu 19.04. But my preferred use case is to use the key as passwordless option (if it's plugged in; allow access - if it's not; enter password). I've found some topics on…
Asitis
  • 569
14
votes
2 answers

Use of Yubikey Neo for login 2FA and lock screen

I want to use my Yubikey Neo to login to Ubuntu 14.04. In addition, it would be convinient if the screen is locked automatically everytime I unplug the Yubikey.
smiddy84
  • 493
11
votes
1 answer

Why can't I use my FIDO keys for logins in Firefox anymore?

My YubiKey always was an easy safe way to log in to various websites, but last week this stopped working: the website asks me to use the security key, Firefox shows a dialog asking to touch the button on the key, but unlike before the button itself…
leftaroundabout
  • 1,116
10
votes
2 answers

How do I use a Yubikey NEO in 14.04 to log into a Google account through Chrome?

How do I make Ubuntu 14.04 recognize a Yubikey NEO for Google account authentication? I have yubikey NEO and Chrome version 46.0.2490.80. I have used the key successfully on a laptop running Windows 8. I'd like to use it on a few Ubuntu machines to…
DanielSank
  • 224
7
votes
1 answer

How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?

The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
Hamish W
  • 341
6
votes
2 answers

Ubuntu 17.10, Yubikey Neo udev rules not triggering

I've got Ubuntu 17.10 installed on a mid-2011 iMac. On a Dell XPS 15 laptop I was able to set up my Yubikey (via udev rules) to activate & deactivate the screensaver when the Yubikey was unplugged or plugged in. I've tried to set up the same thing…
Sean Hagen
  • 81
4
votes
1 answer

How to install Yubikey personalization tool on Ubuntu

How to install binary version of https://www.yubico.com/support/downloads for Ubuntu. I'm using 14.04 LTS. [edit] Also how to fix "An unexpected error has occurred" in Google Account
Paweł Prażak
  • 358
3
votes
3 answers

Yubikey 2FA does not work on Ubuntu 22.04 Firefox from apt

I have set up a web page access with two-factor authentication. Using Firefox installed via Snap, I have been able to access my account. The flow is like this: The web page asks for username and password, when correctly inserted, Firefox asks me to…
Manu J4
  • 339
3
votes
2 answers

Apparmor enforce mode prevents Firefox from reading U2F security key

When the default apparmor profile for Firefox is set to enforce mode, it blocks access to security keys. Disabling the profile restores access. Rules that I've tried and failed: /sys/devices/** r, #include dbus send bus=system…
Eric L
  • 133
3
votes
2 answers

Yubikey on multiple LUKS drives

I have the following LUKS partitions: root@precision:~# blkid | grep crypto_LUKS /dev/nvme0n1p3: UUID="e1ac241d-a91c-4386-9b08-752dc5d0e9b8" TYPE="crypto_LUKS" PARTUUID="91fc5b71-7c22-4e3e-821d-7116a5a46f7e" /dev/nvme0n1p4:…
dross
  • 213
2
votes
0 answers

pam_oath + yubikey: can login with yubikey but not unlock lockscreen

I'm using pam_oath.so from the libpam_oath package to use my yubikey to login. Its configured as OATH-HOTP and it's working fine. I can login with my pin and a press on my yubikey. I dont need to enter my user-pw when login in to my account. But…
bernhard
  • 21
2
votes
2 answers

Using a Yubikey with LUKS on Removable Storage

I'm trying to use a Yubikey 4 as a second factor to access a LUKS-encrypted USB HDD. Here's how far I've gotten: I'm using yubikey-luks to add my HMAC-SHA1 hashed password to slot 7 of the device. Problem: cryptsetup only challenges the yubikey on…
Christopher Richez
  • 21
2
votes
1 answer

Log in to Ubuntu with 2 factor

I recently purchased a Yubikey and I would like to use it to log into my computer. A quick Google search turned up nothing obviously useful to me. I am running Ubuntu 14.10; does anyone know of a way to do this? I did look at the suggested post (the…
GoProCameraByGoPro
  • 1,103
2
votes
1 answer

How to configure a prompt/notice to touch the YubiKey when it's used for sudo

I have configured auth sufficient pam_u2f.so cue [cue_prompt=Tap the Yubikey to sudo] in /etc/pam.d/sudo to be able to sudo by touching my YubiKey. When running a script it might be easy to miss the LED indicator on key, so I configured cue and…
Kalle Richter
  • 6,519
1
2 3