Tutorial assumes you have a U2F capable Yubikey on hand. This tutorial was created and tested on Linux Mint 20.1. Appendix - Further Yubikey(s) Options + Customization.Logout of the graphical session and log back in.Test sudo with U2F in a graphical terminal.Complete list of files that need to be modified.Become root user before making the these edits.

Snippet exmaple of /etc/yubico/u2f_keys file.Copy u2f_keys files to /etc/yubico directory.Prepare the Yubikey for regular user account.Install required package(s) via apt or aptitude.Main Considerations for U2F login on Linux Systems.This article was contributed by 71nuxadd1ct. Authentication Using Challenge Response (From Yubikey).

The following sites were used to build this guide: This prompt should only appear once upon initial login. NOTE: This will allow you to login to your desktop without a password, but you may still be asked to use a password to unlock your keyring. GNOME), you will need to add the auth line to the /etc/pam.d/gdm-password file.Īdd the auth line immediately below the common-auth line. If you want to login to your Desktop Environment, (e.g. This allows you to authenticate to the Linux terminal with your Yubikey.Īdd the auth line to the top of this file (after the comment block). You may need to run pam-auth-update afterwards. Also, the Yubico PAM module page has a pretty good breakdown.Īt a minimum you need to modify this file.Īdd the auth line to the top of this file (after the comment block). Check the man pages for more information. There a a number of other options for PAM. Auth required pam_yubico.so mode=challenge-response chalresp_path=/var/yubico

Yubikey linux