Getting the most out of YubiKeys for your business

Re:Getting the most out of YubiKeys for your business by timothy-quinn on Wednesday June 17, 2020 @07:55PM (#23558260)

Does anyone use YubiKeys on OSX for business use? I've tried integrating them on my personal mac before, but the U2F PAM experience was pretty clunky, and caused weird messages from services like Keychain that (I guess) couldn't decrypt without normal credentials being provided at logon.

[ Parent | on HN ]

Re:Getting the most out of YubiKeys for your business by ciarannolan on Wednesday June 17, 2020 @09:02PM (#23558694)

How were you integrating them on your personal OSX system?

[ Parent | on HN ]

Re:Getting the most out of YubiKeys for your business by timothy-quinn on Wednesday June 17, 2020 @09:24PM (#23558807)

Luckily I wrote down the steps I took. Based on this, but the original seems to be gone now: https://nicluo.com/projects/secure-your-mac-with-yubico-u2f-...

  brew install pam-u2f
  mkdir -p ~/.config/Yubico/
  pamu2fcfg > ~/.config/Yubico/u2f_keys
  <Press the U2f device>
  cat ~/.config/Yubico/u2f_keys # should output <your username>:<really long hash>

  In /etc/pam.d/screensaver 
  Add to the top:
  auth       sufficient     pam_u2f.so

  In /etc/pam.d/authorization
  Add to the top:
  auth       sufficient     pam_u2f.so

[ Parent | on HN ]

Re:Getting the most out of YubiKeys for your business by kevan on Wednesday June 17, 2020 @10:26PM (#23559175)

Yes, I use one daily and haven't had any issues.

[ Parent | on HN ]