Yubico Forum
https://forum.yubico.com/

Windows 10 - Logon - Experience
https://forum.yubico.com/viewtopic.php?f=23&t=2328		 Page 1 of 1
Author:  INOV8 [ Thu Jun 02, 2016 10:39 pm ]
Post subject:  Windows 10 - Logon - Experience
:?

I've been setting up my keys today, and decided to test out the Logon functionality for Windows 10 (10.0.10586)

What I did:
    Created a LOCAL Windows account
    Configured the key for HMAC-SHA1
    Configured the key with YubiKey Logon Admin

All Yubico apps were downloaded and installed as of today, so I assume I have the most up to date versions of all.

Everything worked. No errors. What DOESN'T work is the two-factor functionality on the log-in screen. The Local account does not require the YubiKey despite having YubiKey Logon enabled for the system.

If someone could chime in, that would be nice, but I've given up on it. If someone has a fix, I'll try it. Thanks.
Author:  velosol [ Wed Jun 08, 2016 2:18 am ]
Post subject:  Re: Windows 10 - Logon - Experience
I've had it working on Windows 10 Pro for a while, so it should be fixable.

Semi-obvious question, but have you restarted (not slept/hibernate) since you did the install?

Does the local account you created have a password set?
Author:  INOV8 [ Tue Jun 14, 2016 6:13 pm ]
Post subject:  Re: Windows 10 - Logon - Experience
Yeah, I rebooted per the instructions and set a password for the local account.
Author:  velosol [ Sat Jul 02, 2016 1:29 am ]
Post subject:  Re: Windows 10 - Logon - Experience
Just to make sure we're on the same page - you've opened the Logon program, chosen the local account, inserted the HMAC-SHA1 (no user input)-configured YubiKey, clicked 'Configure' then either answered yes to the popup or checked 'Enabled' and then logged off or restarted, removed the YubiKey, and were still able to log in to the local user account you selected?

If so, do you see the 2 copies of the local account? In Windows 10 the credential provider setup results in 2 versions of the local account showing up - one with a 'key' icon and the other with the icon you set. Both of these versions of the account will require YubiKey to be plugged in although only the 'key' icon one properly surfaces YubiKey-related messages.

We'll get this figured out eventually.
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/