Yubico Forum

Re: Yubikey PIV as 2FA with MacOS Sierra

2016-12-01T05:11:22+01:00

MacOS allows you to login using a token. But it does not forbid login using password.

You cannot disable passwords without using some extra software, like Centrify (pretty expensive) or SmartCardVerify plugin (in the process of becoming open source). The purpose of those is exactly to prevent password-based login.

Unless you're running a business, probably blocking passwords altogether is not a very good idea.

Statistics: Posted by mouse008 — Thu Dec 01, 2016 5:11 am

Re: Yubikey PIV as 2FA with MacOS Sierra

2016-10-25T00:54:58+01:00

I have a problem, When I log out my password isn't working anymore. The only solution is a hard reset.
I can't login anymore.

Statistics: Posted by Fred — Tue Oct 25, 2016 12:54 am

Re: Yubikey PIV as 2FA with MacOS Sierra

2016-10-18T22:54:53+01:00

Aha, I just found out MacOS Sierra supports only numeric PINS. While you can enter alphanumeric PINS in the tool, and can use them on other platforms, these PINS are not accepted on macOS.

So I have to use PIN + Yubikey
But still looking how to disable the password.

Statistics: Posted by Fred — Tue Oct 18, 2016 10:54 pm

Yubikey PIV as 2FA with MacOS Sierra

2016-10-18T22:49:41+01:00

Hi,

I have set up my Yubikey NEO with PIV Manager in MacOS Sierra and I'm able to login with it.
But it's not working like I would like it to work.

I would like to use it like 2FA, so my normal password + the yubikey. And disable all other ways to login so it's impossible to login without the Yubikey.
Is this possible?

Thanks!

Statistics: Posted by Fred — Tue Oct 18, 2016 10:49 pm