Questions tagged [yubikey]
The yubikey tag has no usage guidance.
49
questions
0
votes
1
answer
4k
views
Why YubiKey (USB key) needs administrator rights (or any other device)
Some time after a clean install of Windows 10 or 11 and using Yubico keys (USB keys), they need administrator rights to programs to detect it.
It happens randomly, or I don't remember / can't imagine ...
- 101
1
vote
1
answer
824
views
GPG periodically loses connection to yubikey on monterey
The connection between gpg and my yubikey appears to periodically fail. Decryption attempts are met with the pinentry-mac dialog "please insert card with serial number X".
gpg --card-status -...
rueberger
1
vote
0
answers
782
views
Error when register Yubikey Bio with website
I am having an issue registering a yubikey bio with a website. I have managed to register a Yubikey 5 series with the website without issue however when I try with the Yubikey bio I get an error like ...
- 183
1
vote
1
answer
493
views
What is the cryptographic relationship between an ssh key and my Yubikey?
I am curious what is the cryptographic relationship between the generated ssh private (and public) key when I use my Yubikey to add an extra layer of protection.
Does ssh-keygen write anything into ...
- 132
4
votes
2
answers
5k
views
How to disable OpenSC YubiKey password prompt in Firefox
I have a YubiKey nano plugged into a 2019 MacBook Pro.
When I visit some websites (one public example being Gmail), Firefox brings up a password dialog prompting me to enter the YubiKey password. ...
- 253
1
vote
0
answers
406
views
Best strategy after losing GPG/PGP key passphrase (but still access to YubiKey)
When I got my first YubiKey several years ago, I created a new GPG key specifically for it. After uploading the private key to the YubiKey (keytocard), I also stored an armored copy of the private key ...
- 1,112
0
votes
1
answer
2k
views
SSH Using YubiKey 5 and ED25519 Algorithm
I am starting to use a YubiKey 5 to ssh into remote boxes instead of using a software key. I am generating the keys using this command:
ssh-keygen -t ed25519-sk
This works when I ssh into Ubuntu, but ...
- 103
2
votes
2
answers
2k
views
YubiKey 5C is not recognized via a docking station
I have a new YubiKey 5C NFC which, when plugged directly in my laptop, works fine. However, when I plug it into my docking station it doesn't work at all.
OS: Linux Mint 20.1
Kernel: 5.4.0-77-generic ...
- 103
0
votes
0
answers
74
views
Are there solutions to boot to a hidden OS only when special usb key is present?
My laptop was stolen recently.
Unfortunately I did not take the time to install a honeypot on it.
With my new laptop I am thinking about installing a honeypot OS and a hidden OS that I will use for my ...
2
votes
0
answers
371
views
ssh-add -s Win10
I am unable to add my card using ssh-add -s on Windows 10, ssh-agent is running. Getting below error: C:\Program Files\Yubico\Yubico PIV Tool\bin>ssh-add -s libykcs11.dll
Enter passphrase for PKCS#...
- 21
2
votes
0
answers
2k
views
Bitlocker Full Drive Encryption with YubiKey
I'd like to secure the hard discs of a new Windows 10 (Pro/Enterprise) PC with BitLocker full disc encryptuon using hardware tokens and PIN (real 2FA).
How can I set up a YubiKey so I can use it as ...
- 2,124
1
vote
1
answer
4k
views
gpg: decryption failed: No secret key
First, I spent an hour trying answers with similar titles so please read this through before flagging this question as a duplicate.
I use a YubiKey to store my PGP private key using its smart card ...
- 1,010
0
votes
1
answer
460
views
Mac GPG can't generate smartcard keys
Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4
% gpg --card-edit
Reader ...........: Yubico YubiKey OTP FIDO CCID
Application ID ...: ...
- 101
3
votes
1
answer
4k
views
SSH server asking for password, but PasswordAuthentication is disabled
what you will see is the current state of a problem I am trying to solve.
I restarted sshd before filling the body this question.
What I am trying to do:
I need to use ssh keys with a yubikey ...
- 91
2
votes
0
answers
1k
views
Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?
Yubikey as SmartCard
I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the Encrypted ...
- 552