Yubikey guide for Git Signing, SSH Auth, U2F 2FA, and 1Password (2017)

Re:Yubikey guide for Git Signing, SSH Auth, U2F 2FA, and 1Pa... by EngineerBetter on Tuesday April 30, 2019 @12:43PM (#19789530)

It's worth pointing out that AWS does now support U2F, which isn't reflected in the posts.

[ Parent | on HN ]

Re:Yubikey guide for Git Signing, SSH Auth, U2F 2FA, and 1Pa... by tialaramex on Tuesday April 30, 2019 @01:17PM (#19789892)

I had this set for my old AWS work account, but unlike a good WebAuthn implementation I'm pretty sure AWS only allowed me to a set a single key.

I tolerated that because a work account administrator can let me back in if I lose the key, but this is very much a second class implementation and I think AWS ought to do better.

[ Parent | on HN ]

Re:Yubikey guide for Git Signing, SSH Auth, U2F 2FA, and 1Pa... by bradstewart on Wednesday May 01, 2019 @10:28AM (#19797269)

It's true. You can only set one 2FA factor on an IAM account. As a work around, I ended up making myself two IAM accounts: one tied to primary Yubikey and another to my backup. Certainly not ideal.

[ Parent | on HN ]