4 ms·

For macOS login? Is that enterprise-only stuff?

• cvccvroomvroom 4y ago
  Nope. Doesn't require AD either.
• rgoulter 4y ago
  It looks like a PAM thing. (Where if you screw up your PAM setup, you'll lock yourself out of your computer). Results of Yubikey usage look mixed. It looks like there are some caveats around Full Disk Encryption, and with use with M1 Macs. Here's a guide which uses the PIV module with the newer Yubikeys. https://support.yubico.com/hc/en-us/articles/360016649059 https://support.yubico.com/hc/en-us/articles/360016649059 For the cheaper U2F security keys (or older Yubikeys which do challenge-response stuff).. I've seen comments that had success using U2F for sudo/su, but not the login screen.
  • cvccvroomvroom 4y ago
    Don't screw up your PAM config by knowing what you're doing by experimenting use-cases and usage elsewhere.