Can you use YubiKey offline?
Whether or not YubiKey touch is required for offline authentication is an option. Click “OK”. When the configuration is complete, Slot 2 will show “This slot is configured”. In order to authenticate offline, you need to authenticate online on your PC once.
How does the YubiKey work?
The YubiKey is a device that makes two-factor authentication as simple as possible. Instead of a code being texted to you, or generated by an app on your phone, you press a button on your YubiKey. That’s it. Each device has a unique code built on to it, which is used to generate codes that help confirm your identity.
Where does the challenge response go in Yubico?
Yubico Login for Windows writes the challenge-response secret to slot 2 by default, but you can have it written to slot 1. The application will warn you before you overwrite anything; however, it will not block you from doing so. Use a different YubiKey for each registration.
Can a YubiKey be used as a second factor for authentication?
Yubico Login for Windows adds the challenge/response capabilities of the YubiKey as a second factor for authentication for local Windows accounts. All currently available YubiKeys with the exception of the Security Key by Yubico can be used with Yubico Login for Windows.
Where do I insert my YubiKey for the challenge?
Insert your YubiKey. If successful, you will see an output such as Stored initial challenge and expected response in ‘/home/ /.yubico/challenge- ‘ where is your username and is the serial number printed on the YubiKey. If you have backup YubiKeys, repeat the steps above to associate them with your account.
How to authenticate with challenge-reseponse-Yubico Pam?
Then back to the PAM configuration step, first make sure you have a root terminal available to be able to disable YubiKey login in case of issues. Then run the “pam-auth-update” command and enable the Yubico PAM module. You should now be able to authenticate using YubiKey Challenge-Reseponse together with a password like this: