Yubico Forum
https://forum.yubico.com/

[QUESTION] W10 Logon crash
https://forum.yubico.com/viewtopic.php?f=35&t=2240		 Page 1 of 1
Author:  PhilippeR [ Sat Feb 27, 2016 2:20 pm ]
Post subject:  [QUESTION] W10 Logon crash
Hello,
After enabling the Logon feature on my W10 Pro 64-bits (v10.0 #10240), I'm unable to use it and after few failures, it crash the system (like a power off..., black screen - not the BSOD).

1) Enable the feature, test is correct.
2) Reboot
3) Try to logon. Unable :(
I viewed this video to check if I was wrong... https://www.youtube.com/watch?v=2J0irt4Pons
a) With the standard account icon on the logon screen
b) With the password's icon (it displays: YubiKey Logon enabled for user)
5) If I press the key button, the OTP seems to be used instead of my password, not good.
4) After few failures (3/4), the system crash

Various messages displayed (in french):
- Echec de l'appel de procédure distante.
- Etat:
- Descripteur non valide

By the way, when it become to goes wrong, I'm unable to use other's accounts not linked with the YubiKey.
I disabled the feature at this time.

Any clues to help me to be an happy user :)?
Regards,
Philippe

Attachments:
File comment: Event viewer report
W10LogonCrash.png
W10LogonCrash.png [ 7.55 KiB | Viewed 908 times ]
File comment: Settings
W10LogonTest.png
W10LogonTest.png [ 8.4 KiB | Viewed 908 times ]
Author:  ChrisHalos [ Sun Feb 28, 2016 3:52 am ]
Post subject:  Re: [QUESTION] W10 Logon crash
You selected "require user input (button press)" when programming the Challenge-Response. You CANNOT do this when implementing Windows Login.

https://www.yubico.com/applications/com ... ows-login/

Step 1: Configure your YubiKey for challenge-response using HMAC-SHA1 with variable input for slot 2. For instructions on how to do this using the YubiKey Personalization Tool, review the instructions in the Yubico Windows Login Guide (available in PDF format from our Documentation page). When configuring your YubiKey, be sure that “Require user input (button press)” is not selected.
Author:  PhilippeR [ Sun Feb 28, 2016 12:26 pm ]
Post subject:  Re: [QUESTION] W10 Logon crash
Hi Chris,
Thanks for pointing me to always read the manual first, the truth is in there ;). My fault.
Well spotted, that was the option not to check. Now it works.
I have few remarks:
1) This doesn't excuse the solution to make the system unstable (euphemism) with this wrong configuration. Something to do maybe...
2) The doc is fine but obsolete. XP is a dead OS now. In W10, you'll see 2 icons at logon after that change.
- The 'password' one (with a key as icon), the one to use with the YubiKey (otherwise displays: 'YubiKey Logon failed, is there a YubiKey inserted?');
- The previous one (with the user's picture), which become no more usable (otherwise displays: 'Etat :'...). It should be a good idea to display something after the 'State:' in order to know why and what to do.
Additional question: Is there a way to display only one icon by user (the 'key' one with YubiKey, and the usual one for others)?
Regards,
Philippe

Attachments:
File comment: Multiple icons @ logon.
W10LogonIcons.png
W10LogonIcons.png [ 112.46 KiB | Viewed 892 times ]
File comment: Subliminal message @ logon.
W10FailToConnect.png
W10FailToConnect.png [ 38.22 KiB | Viewed 892 times ]
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/