Reading · debugging works! Linux · Code · Security

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.


 Update 2025/04: Add section “Disk encryption: LUKS + fido2 device” 
Update 2025/04: Add section “Change FIDO2/U2F pin” 
 
 This post shows different use cases for a Yubikey. There are also command line examples in a cheatsheet like manner. I’m using a Yubikey 5C on Arch Linux. If you run into issues, try to use a newer version of ykman (part of…

Update 2025/04: Add section “Disk encryption: LUKS + fido2 device”
Update 2025/04: Add section “Change FIDO2/U2F pin”

This post shows different use cases for a Yubikey. There are also command line examples in a cheatsheet like manner. I’m using a Yubikey 5C on Arch Linux. If you run into issues, try to use a newer version of ykman (part of yubikey-manager package on Arch).

kmille@linbox:~ ykman --version
YubiKey Manager (ykman) version: 4.0.9

Some features depend on the firmware version of the Yubikey. The tooling (like the wording) around the Yubikey is sometimes a bit confusing. I use this guide as a reference if I need to reconfigure something after a long time. It helped me in the past, so I made a clean rewrite. I hope it helps you too. Please get in contact with me if something is wrong/missing (Hacker News discussion).

How to Yubikey: a configuration cheatsheet

Comments