Questions tagged [yubico]

This tag should be used for all products provided by the Yubico company, such as Yubikey, a two-factor authentication hardware key.

114 questions
2
votes
1 answer

PKCS11 Windows invalid engine YubiHSM2

it's me again. I am working with a YubiHSM2 HSM Module and I am trying to set it up for the use of pkcs11 engine which will allow me to use OpenSSL with the HSM. I am implementing this on Windows, which brings me a lot of trouble. I HAVE installed…
LikeAKemper
  • 155
  • 2
  • 12
2
votes
1 answer

FIDO U2F on a site with changing hostnames/IP addresses

I have a situation, where I want to implement FIDO U2F (using YubiKey) on an administrative interface to a load balancer, so that after login, in order to administer the system - U2F must be used as an extra layer of authentication. Over the life…
2
votes
2 answers

U2F integration with multiple FacetIDs without Chrome Extension but u2f-api.js

I try to implement U2F into my web application. Since the application is available with more than one URL, I have to add a JSON file with valid FacetIDs as described in the spec. Yubico has a shorter summary of that spec on their…
MichaelS
  • 3,809
  • 2
  • 26
  • 33
2
votes
2 answers

Fido U2F client side javascript source code

I'm looking for a JavaScript source code (client side) to make communication between Fido U2F token and Google Chrome (Version 41.0.2272.89 m). Please help me
1
vote
0 answers

Authentication failure when multiple non-discoverable credentials are registered

I've two devices which does not send userHandle during the WebAuthn authentication. But once both of the devices are registered, one of two is not allowed to login. Caused by: java.lang.IllegalArgumentException: Unknown credential: ByteArray(*****) …
1
vote
1 answer

github / RSA key problems preventing cargo from updating crates

I recently configured my Yubikey to sign commits on github. That is working perfect. An unfortunate by-product of the yubikey seems to be that I have to authenticate with my yubikey even just to clone public repos. I can live with that, but now I…
Roger J Bos CFA
  • 474
  • 4
  • 16
1
vote
1 answer

Why can't I connect to github with my ssh key on yubikey

I have an SSH key generated on my desktop as well as one generated on my yubikey. Both are ED25519 keys, with the one on the yubikey being an ED25519-sk for the security key. When I run "ssh -t git@github.com" to attempt to connect to github to test…
Austin
  • 69
  • 2
  • 9
1
vote
1 answer

ssh yubikey: "Unable to load resident keys: device not found"

I use SSH keys stored on a Yubikey. Today I got the following message when adding my keys to the ssh-agent, as usual: $ ssh-add -K Enter PIN for authenticator: Provider "internal" returned failure -4 Unable to load resident keys: device not…
hraban
  • 1,819
  • 1
  • 17
  • 27
1
vote
1 answer

Yubikey PIV "The smartcard cannot perform the requested operation."

I am trying to use a Yubikey to authenticate with Microsoft's AAD CBA however when I connect the Yubikey I get the error: The Smart card cannot perform the requested operation or the operation requires a different smart card To troubleshoot I…
Igal Flegmann
  • 582
  • 1
  • 8
  • 19
1
vote
3 answers

ssh-keygen on yubikey gives FIDO_ERR_PIN_AUTH_BLOCKED

ssh-keygen -vvvv -t ecdsa-sk -O resident Generating public/private ecdsa-sk key pair. You may need to touch your authenticator to authorize key generation. Enter PIN for authenticator: debug3: start_helper: started pid=16581 debug3: ssh_msg_send:…
Guerlando OCs
  • 1,886
  • 9
  • 61
  • 150
1
vote
3 answers

"User is not enrolled in Duo Security" after adding a security key

I succesfully added a YubiKey to Snowflake MFA: Next time I try to login I immediately get following "User is not enrolled in Duo Security. Contact your local system administrator." error: After inputting my username and password, I expect the…
1
vote
1 answer

OTP Validation with Yubikey - issue with HMAC-SHA1 signature

I'm meeting an understanding issue with OTP validation for Yubikey I'm trying to develop in flutter the Validation Protocol V2 (https://developers.yubico.com/OTP/Specifications/OTP_validation_protocol.html) I don't understand how you obtain the…
redDwarf
  • 336
  • 1
  • 9
1
vote
1 answer

Getting credential from yubikey for passwordless

Just started to play around yubikey, my question is based on the following assumptions: Passwordless doesn't need to know the username based on the following demo Based on this doc the allowedCredentials can be omitted I registered the yubikey by…
James Lin
  • 25,028
  • 36
  • 133
  • 233
1
vote
0 answers

Yubico YubiHSM2 connector with HTTPS access

I use Win10 for my experiments. I want to create HTTPS access between yubihsm-shell and yubihsm-connector. Official guidelines are not very detailed but after a while I found some relevant information in…
Ivan Angelov
  • 313
  • 1
  • 7
1
vote
1 answer

Does Webauthn API Allow Clients to Detect/Identify a Token?

As you may have noticed from previous questions, I'm building a web site that will support authentication via Webauthn using Yubikeys (maybe other tokens later). As part of that process I'd like to be able to (1) detect whether or not an…
user4294565
  • 131
  • 5