Yubico Forum

Re: Yubikey Windows pin_policy bypass for SSH with PIV

2017-06-20T15:15:19+01:00

Problem solved by this fork oh Putty CAC, named Putty CAC 0.69

https://github.com/NoMoreFood/putty-cac/releases

Statistics: Posted by Walterdude — Tue Jun 20, 2017 3:15 pm

Re: Yubikey Windows pin_policy bypass for SSH with PIV

2017-06-15T15:49:50+01:00

It seems that : Smart Card's Registry Key are missing in RedStone2 version.

Sow how to make it work again and respect piv pin policy ?

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CertProp

https://docs.microsoft.com/en-us/window ... istry-keys

Statistics: Posted by Walterdude — Thu Jun 15, 2017 3:49 pm

[SOLVED] Yubikey Windows pin_policy bypass for SSH with PIV

2017-06-20T15:16:54+01:00

Hello,

I've configured my Yubikey 4 for Authenticating SSH with PIV and PKCS#11.
Everything works fine with cmder in bash mode and a modified version of pageant.

My problem is that my private key was generated with --pin-policy="once" option and despite that,
a windows 10 security prompt (see attached jpg) want my pin every time i'm trying to connect with ssh on my servers.
So i'm thinking that windows 10 has a pin-policy for smartcards that overrides the policy of my private key.

What do you think ? , does anyone have a solution please ?

All my apologies for the quality of my english, i'm just a french dev !!!

Statistics: Posted by Walterdude — Thu Jun 15, 2017 9:41 am