Yubico Forum

I've been setting up my keys today, and decided to test out the Logon functionality for Windows 10 (10.0.10586)

What I did:

Created a LOCAL Windows account
Configured the key for HMAC-SHA1
Configured the key with YubiKey Logon Admin

All Yubico apps were downloaded and installed as of today, so I assume I have the most up to date versions of all.

Everything worked. No errors. What DOESN'T work is the two-factor functionality on the log-in screen. The Local account does not require the YubiKey despite having YubiKey Logon enabled for the system.

If someone could chime in, that would be nice, but I've given up on it. If someone has a fix, I'll try it. Thanks.

I've had it working on Windows 10 Pro for a while, so it should be fixable.

Semi-obvious question, but have you restarted (not slept/hibernate) since you did the install?

Does the local account you created have a password set?

Yeah, I rebooted per the instructions and set a password for the local account.

Just to make sure we're on the same page - you've opened the Logon program, chosen the local account, inserted the HMAC-SHA1 (no user input)-configured YubiKey, clicked 'Configure' then either answered yes to the popup or checked 'Enabled' and then logged off or restarted, removed the YubiKey, and were still able to log in to the local user account you selected?

If so, do you see the 2 copies of the local account? In Windows 10 the credential provider setup results in 2 versions of the local account showing up - one with a 'key' icon and the other with the icon you set. Both of these versions of the account will require YubiKey to be plugged in although only the 'key' icon one properly surfaces YubiKey-related messages.

We'll get this figured out eventually.