the.bay.news

Unlock LUKS volume with Yubikey without pin or presence

NixOS Discourse
Unlock LUKS volume with Yubikey without pin or presence
At the moment, FIDO2-HMAC doesn’t seem to allow unlocking with a Yubikey without user pin or user presence. Is there a way to patch the systemd package to allow it, or do I have to switch to PKCS#11? If the latter, will the following steps (taken from here) wipe out the age-plugin-yubikey identities currently on the Yubikey? ykman piv reset ykman piv generate-key -a RSA2048 9d pubkey.pem ykman piv generate-certificate --subject "Knobelei" 9d pubkey.pem rm pubkey.pem

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.