Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #205542

Yubikey and LUKS on testing (Buster)

Show all headers | View raw

Hi! :)
Im trying to use yubikey with disk encryption.

Im running Buster and my partitions are

$ lsblk 
NAME                    MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
nvme0n1                 259:0    0 238.5G  0 disk  
├─nvme0n1p1             259:1    0   512M  0 part  /boot/efi
├─nvme0n1p2             259:2    0   244M  0 part  /boot
└─nvme0n1p3             259:3    0 237.8G  0 part  
  └─nvme0n1p3_crypt     254:0    0 237.8G  0 crypt 
    ├─Laptop--vg-root   254:1    0   230G  0 lvm   /
    └─Laptop--vg-swap_1 254:2    0   7.7G  0 lvm   [SWAP]


I insert yubikey with an empty slot on 2 and i execute the following commands 

$ sudo ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-visible

then

$ sudo yubikey-luks-enroll -d /dev/nvme0n1p3 -s 7

Then i reboot my computer and when it asks for a password to unlock my disk encryption I insert my yubikey.
It doesn't accept the password that i programmed to use with yubikey. 

Instead it accepts the password i use without the yubikey! The prompt to enter my password doesn't mention yubikey.

Any ideas?

Thanks in advance for your help!

PS.I have 2 yubikeys. I'm having the same problem with both of them.

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Yubikey and LUKS on testing (Buster) gpdsbe@mailbox.org - 2019-02-20 11:20 +0100
  Re: Yubikey and LUKS on testing (Buster) Roberto C. Sánchez <roberto@debian.org> - 2019-02-20 13:10 +0100
    Re: Yubikey and LUKS on testing (Buster) Georgios Pediaditis <gped@mailbox.org> - 2019-02-20 14:50 +0100
      Re: Yubikey and LUKS on testing (Buster) Curt <curty@free.fr> - 2019-02-20 15:20 +0100
        Re: Yubikey and LUKS on testing (Buster) gpdsbe@mailbox.org - 2019-02-20 18:50 +0100

csiph-web