User Tools

Site Tools


yubikey

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
yubikey [2016/01/17 17:38]
ben [One-time Hardware Setup]
yubikey [2017/10/16 19:26] (current)
ben
Line 3: Line 3:
   * Yubikey 4 needs to be enabled for OTP+CCID+U2F+PGP modes concurrently: <code bash>   * Yubikey 4 needs to be enabled for OTP+CCID+U2F+PGP modes concurrently: <code bash>
 sudo ykpersonalize -m86 sudo ykpersonalize -m86
-</code>+</code> (Use ''-m85'' to disable OTP mode for nanos)
   * Setup udev rules to allow non-root access to the yubikey with GPG (Taken from [[https://finninday.net/wiki/index.php/Yubikey#create_udev_rule_for_yubikey]] and modified slightly for yubikey v4: <code text /etc/udev/rules.d/69-yubikey.rules>   * Setup udev rules to allow non-root access to the yubikey with GPG (Taken from [[https://finninday.net/wiki/index.php/Yubikey#create_udev_rule_for_yubikey]] and modified slightly for yubikey v4: <code text /etc/udev/rules.d/69-yubikey.rules>
 ACTION!="add|change", GOTO="yubico_end" ACTION!="add|change", GOTO="yubico_end"
Line 42: Line 42:
   eval "$(/usr/bin/gpg-agent --daemon --enable-ssh-support --write-env-file ~/.gpg-agent-info)"   eval "$(/usr/bin/gpg-agent --daemon --enable-ssh-support --write-env-file ~/.gpg-agent-info)"
 fi fi
 +</code>
 +  * Generate the SSH public key string to go in ''~/.ssh/authorized_keys'' (or LDAP) using: <code bash>
 +gpgkey2ssh <authentication subkey id>
 </code> </code>
yubikey.1453052323.txt.gz · Last modified: 2016/01/17 17:38 by ben