Yubico Forum

Re: Mac OS X filevault 2, and static password doesn't work

2014-11-05T08:29:07+01:00

Well, I looked at the issue again and it turns out it's right in yubicos manual. It's a layout issue. I used a static password that changes depending on layout. My regular layout is Swedish and when booting he computer and trying to unlock file vault 2 the layout is "us". It is simple enough to diagnose, just input your static string in an editor and change layout.
I have tried using the mod hex calculator from yubico but it does not help me, I can not get it to work but need to change my password to something compatible. Well, bite the bullet i guess

Statistics: Posted by skitapa — Wed Nov 05, 2014 8:29 am

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-07T08:19:24+01:00

I noticed that you needed to press the update settings. I thought that maybe the program remembered my setting and did not load it from the yubikey. So I changed the input speed to 20 ms, and my Yubikey Personalization app saves the settings automatically it seems. The update settings button is grayed out. I changed it back to 60 ms.

Statistics: Posted by skitapa — Fri Feb 07, 2014 8:19 am

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-07T08:12:37+01:00

I checked for a change locale button or something. But could not find any.
Is it possible to change locale in the startup/decrypt screen, I can not even use my mouse there.
I will check again for the delay, it's set on 60 ms. So I guess that leaves only the locale as the problem.

Statistics: Posted by skitapa — Fri Feb 07, 2014 8:12 am

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-05T18:44:09+01:00

Tom wrote:

Hi,

did you tried slowing down the Yubikey output of 60ms?

(this is slightly embarrassing)

I thought I had done that. It turns out I had omitted to press the "Update Settings..." button on the interface.
Now the static password is entered noticeably slower and boot completes successfully. I'll now experiment with the faster delay options.

EDIT: login is also successful with a 40ms delay. 20ms is too fast and does not work.

skitapa; If your problem is different from mine and is in fact a locale problem you could try setting your locale to american temporarily while you set your password so the characters match at the boot screen.

~Thanks

Statistics: Posted by mint — Wed Feb 05, 2014 6:44 pm

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-04T13:24:34+01:00

Tom wrote:

Hi,

did you tried slowing down the Yubikey output of 60ms?

Yup, did that. Does not help unfortunately.

Statistics: Posted by skitapa — Tue Feb 04, 2014 1:24 pm

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-04T13:22:43+01:00

Hi,

did you tried slowing down the Yubikey output of 60ms?

Statistics: Posted by Tom — Tue Feb 04, 2014 1:22 pm

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-04T12:09:37+01:00

mint wrote:

Hi.

I have this exact problem as described as well.
It's missing keystrokes. Sometimes (often) the return stoke will be missed and I'm able to count the length of the input by pressing the back button. My static password is 32 characters long and contains no characters outside the 7 bit ascii range. The input from the yubikey is inconsistent, varying between 19 and 24 characters. The problem does not persist post boot.

skitapa: I'd be interested to hear if you've found a viable solution.

Hi there!

No unfortunately I have not found a solution but is forced to input my password every time I restart my computer. It's very annoying and I am glad to see that I am not the only one experiencing this issue.
I am however at a loss of how to move on from here.

Statistics: Posted by skitapa — Tue Feb 04, 2014 12:09 pm

Re: Mac OS X filevault 2, and static password doesn't work

2014-02-04T12:04:19+01:00

Statistics: Posted by mint — Tue Feb 04, 2014 12:04 pm

Re: Mac OS X filevault 2, and static password doesn't work

2013-09-19T10:01:35+01:00

I checked again whether or not one could change the layout during unlocking of filevault 2, and it is not possible from what I can see. This poses a real problem, is there any chance you could look into it? Typing it by hand is fine for me and now, but what if you have a static password that you have not memorized?
I understand OS X support is not top tier priority, but it is easier for me to persuade my boss to invest in yubikeys if these issues are sorted out.

Statistics: Posted by skitapa — Thu Sep 19, 2013 10:01 am

Re: Mac OS X filevault 2, and static password doesn't work

2013-08-22T12:14:17+01:00

Ah, now I understand what you mean by layout. I don't know really. I googled and saw that it defaults to US qwerty when in filevault. I use happy hacking 2 /swedish layout in the OS. I will check it out and see if there is some kind of layout missmatch that could certainly be what produces this error.

Statistics: Posted by skitapa — Thu Aug 22, 2013 12:14 pm

Re: Mac OS X filevault 2, and static password doesn't work

2013-08-22T12:09:53+01:00

I am sorry I do not understand what you mean by layout. I use my yubikey successfully when logging in when the OS is up and running. Works like a charm. However when I need to use it to unencrypt my filevault2 (starting up the OS) I can input my password from the yubikey but the box shakes and reports that the password is wrong. So I need to type it manually, which I sometimes do also when logging in. That tells me that it is not the password stored in the yubikey that is to fault, but rather that the input box can not process it fast enough or something.

Statistics: Posted by skitapa — Thu Aug 22, 2013 12:09 pm

Re: Mac OS X filevault 2, and static password doesn't work

2013-08-22T12:02:41+01:00

Do you have different layout loaded once the OS is started?

Statistics: Posted by Tom — Thu Aug 22, 2013 12:02 pm

Re: Mac OS X filevault 2, and static password doesn't work

2013-08-22T10:52:23+01:00

I am sorry. I did not express myself better. The box do accept the input. It just validates the result as not matching my correct password.

Statistics: Posted by skitapa — Thu Aug 22, 2013 10:52 am

Re: Mac OS X filevault 2, and static password doesn't work

2013-08-22T10:48:08+01:00

Hello,

It looks like your device does not support usb hid device at boot time, therefore you are unable to use the Yubikey at boot.

The Yubikey acts as a USB keyboard.

Statistics: Posted by Tom — Thu Aug 22, 2013 10:48 am

Mac OS X filevault 2, and static password doesn't work

2013-08-22T09:53:25+01:00

Hi.

I encrypted my harddrive using filevault 2, and are using a static, quite strong, password to login into my user account.
However, when booting the OS and the harddrive is to be unlocked the input box doesn't accept my static password. I have used the utility to slow down the input of characters to 60ms but it still does not accept it and I have to manually type it every time the computer needs to be restarted.

Is this something I can fix? Or is this an Apple issue?

Statistics: Posted by skitapa — Thu Aug 22, 2013 9:53 am