3 ms·
You can create a key and load it into the Yubikey (and thus backup the key) rather than have the yubikey create the key on itself directly.
by deadbunny 5y ago
You can create a key and load it into the Yubikey (and thus backup the key) rather than have the yubikey create the key on itself directly.
- tialaramex 5y agoYou can't do this with the key underlying FIDO (thus U2F/ WebAuthn and the SSH feature the linked article is discussing) Yubico supply a tool that lets you perform a "factory reset" giving you a random key (effectively: instantly invalidating all credentials you previously used) but not one that would let you pick the key. IIRC The relevant standard is clear that manufacturers should not offer this capability as it's obvious how it would get exploited.