Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [yubikey]

YubiKey is a security key device manufactured by Yubico that supports one-time passwords, public key encryption, and U2F protocol.

0
votes
0answers
29 views

Require a yubikey AND (publickey OR password) for SSHD auth

I am attempting to configure OpenSSH on a Debian based system to always require a yubikey TOTP AND either a publickey OR password. I realise other combinations are possible through ...
4
votes
0answers
36 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
0
votes
0answers
54 views

cannot move imported SSH key to yubikey

I am using my RSA key to access some servers via SSH, and I would like to move it to my new yubikey and keep using it. I had successfully imported the key into gpg following the advices from THIS post,...
1
vote
1answer
427 views

Error: could not find a distribution template for Kali/kali-rolling [duplicate]

Trying to follow Enabling the Yubico PPA on Ubuntu : Yubico Support, by executing: add-apt-repository ppa:yubico/stable && sudo apt-get update yet, getting following message: # add-apt-...
2
votes
0answers
43 views

Why does gpg --card-status require dbus to be restarted?

When I log in with my (usb) yubikey 4 inserted, I can run gpg --card-status and it gives the expected result. If I remove the yubikey and run gpg --card-status it, correctly, tells me that there is no ...
1
vote
2answers
970 views

Connecting to 'unix"//var/run/charon.ctl' failed: connection refused

I have tried to find some answers on this and other sites trying to find out the problem, but my attempts failed. The rule is very simple: I want to establish my Ipsec tunnel when my Yubikey is ...
2
votes
1answer
282 views

Where to configure pam in Fedora for Yubikey?

I'm testing out Fedora (27) for the first time, trying to get my YubiKey 4 working for local authentication. In Ubuntu I could configure /etc/pam.d/common-auth to use libpam-yubico as described here....
1
vote
0answers
502 views

gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket [closed]

I am using a yubikey nano on my local system to do encrypt/decrypt/sign on remote systems, plus SSH agent forwarding. I recall this being a bear to setup, but it has worked flawlessly for several ...
1
vote
1answer
912 views

Evolution with GnuPG: `no imported public key` even if it is imported

I was running Evolution on Debian buster (testing) amd64 with GnuPG to encrypt mails. I have my GPG private key on a YubiKey actings as GPG smartcard. As Evolution somehow failed to load my calendars ...
1
vote
0answers
76 views

Trying to automate yubikey deployment in my workplace

Disclaimer I am just doing my first steps into bash scripting so this is going to be a very basic question I am trying to write a basic script that will run the gpg --card-edit command on any ...
0
votes
1answer
352 views

pinentry not showing in tmux

I'm having some trouble getting gpg (actually pass which uses gpg in the background) to work inside of tmux and a Yubikey Neo. When attempting to decrypt a file or sign something using gpg I get the ...
4
votes
2answers
549 views

Disable device with libinput

I want to disable a keyboard input device with libinput. Something analogous to: xinput set-int-prop 1 "Device Enabled" 8 0 which follows the syntax: --set-int-prop device property format value ...
3
votes
1answer
763 views

Yubikey file encryption without using OpenPGP?

Is there a way to encrypt single files with a Yubikey that doesn't use OpenPGP? I use my Yubikey for ssh logins and encrypting individual files (password stores.) The Yubikey is operating in CCID ...
3
votes
0answers
435 views

GnuPG 2.1.20 ssh agent forwarding with yubikey on OSX fails

Tried out ProxyJump as suggested by @JensErat. I configured it like this in ssh config: Host jump-to-server HostName server.hostname ProxyJump ubuntu@jump.hostname User ubuntu But it does not work, ...
2
votes
0answers
452 views

How to generate OTP codes offline by Security Key in Debian?

Assume you need the OTPs by devices which are separate from the Debian system which generates the codes. Here, the U2F does not work in all cases so I need OTPs. I am trying to add offline OTP ...
3
votes
1answer
309 views

How to use Security Key in NordVPN login?

Situation: static password file in NordVPN settings Proposal: any security key but proposed one, YubiKey, because big userbase I heard that you can setup Security key (Fido U2F) with VPN in ...
2
votes
2answers
895 views

How do I make my Yubikey Standard work with Linux Mint 18.1 Cinnamon?

In another word, I need to allow my Linux account to access my Yubikey Standard (Security Key) by adding a udev rule for the device. Preamble: I was trying to add Yubikey Standard as a Security Key ...
-2
votes
2answers
823 views

How to 2-step authenticate by password + U2F Yubikey in Linux KeePassX?

I would like to have 2-step authentication by password + Fido U2F security key. I did not find any approaches which would work in Debian 8.7. The OS should not be a limiting factor here because Qt ...
1
vote
0answers
79 views

How can i find out why my Yubikey is working on a Debian Jessie live cd but not with FAI/debootstrap?

I have a Yubikey 4 Nano. With a Debian Jessie live cd and a modified /etc/libccid_Info.plist (see here ) as well as libccid, pcscd and a few other packages installed I'm able to use it with e.g. pkcs-...
2
votes
2answers
2k views

How to use YubiKeys with SSH keys in 2-step verification?

I can setup SSH keypair without Fido U2F as described SSH-agent working over many servers without retyping? Some flag? in the thread. Two step verification would be very good: password for the ...
2
votes
1answer
56 views

Disable 2FA while at home

I have two factor authentication setup for login on my laptop using a Yubikey setup for U2F. Now, while I love the security, it is a pain to use the key while sitting at home. Is there a way for my ...
4
votes
1answer
5k views

Why do GnuPG 2 and gpg-connect-agent fail with “ERR 67108983 No SmartCard daemon”?

Using Debian Jessie and GnuPG 2, each time I try to use GnuPG 2 (gpg2) or gpg-connect-agent together with an OpenPGP smartcard (in my case a YubiKey), the operation fails with a message $ gpg-connect-...