6 ms·
For my yubikey, I've got a couple of scripts that kill and boot my i3lock when I plug and unplug it. I haven't setup desktop login on it though, because that wo
by captn3m0 10y ago
For my yubikey, I've got a couple of scripts that kill and boot my i3lock when I plug and unplug it. I haven't setup desktop login on it though, because that would be too risky for me.
If this stores GPG, then you could do SSH as well. Edit: Reading the comments, looks like it only does core U2F, so no SSH for sure. I'm not sure if there is a U2F module for PAM yet.
- sliken 10y agoGenerally U2F widgets don't run code or have any extra functionality unless they specifically mention it. The OP key looks pretty barebones I wouldn't expect it to generate/store/use ssh or pgp private keys. That's more like a yubi key 4 or similar more expensive widgets that are basically smartcards and/or HSMs. There is a U2F pam module that can allow you to use a U2F widget for screen unlock, login, sudo and the like. If you are worried about the U2F dying/being stolen/lost then you could always authorize more than one U2F widget and keep one in a safe place.
- gravypod 10y agoWell by "do login" I meant to basically require that + password. It's good to see it's possible. I've been toying with the idea of buying a dock for my thinkpad and using it as my main system retiring my current low-powered desktop as a server. My main concern is that, since I keep important docs on my system, I'd now be carrying them with me. Doing 2FA for harddrive decryption and system login would be amazing for me since then I'd be able to know that even if my computer is stolen the "attacker" won't really have the means to login.