Unlock LUKS volume with Yubikey without pin or presence
NixOS Discourse
Unlock LUKS volume with Yubikey without pin or presence
At the moment, FIDO2-HMAC doesn’t seem to allow unlocking with a Yubikey without user pin or user presence. Is there a way to patch the systemd package to allow it, or do I have to switch to PKCS#11? If the latter, will the following steps (taken from here) wipe out the age-plugin-yubikey identities currently on the Yubikey? ykman piv reset ykman piv generate-key -a RSA2048 9d pubkey.pem ykman piv generate-certificate --subject "Knobelei" 9d pubkey.pem rm pubkey.pem
0 comments
No comments yet.