Yubico Forum
https://forum.yubico.com/

Cannot get my new YubiKey 4 to work in macOS Sierra
https://forum.yubico.com/viewtopic.php?f=35&t=2503
Page 1 of 1

Author:  renekreijveld [ Wed Dec 14, 2016 2:35 pm ]
Post subject:  Cannot get my new YubiKey 4 to work in macOS Sierra

Hi, I followed the procedure from https://www.yubico.com/support/knowledg ... os-sierra/ to setup a YubiKey 4 on macOS Sierra. I followed all steps and the last step was entering my login keychain password. After that I get no message (maybe that is as it should be).

Is there something additional that I shoud do?

I tried logging out and restarting my Mac without the YubiKey 4 inserted into a USB slot. Nowhere the system asks for the PIN or asks me to insert the YubiKey. When I am at the loginscreen and insert the YubiKey nothing happens.

Did I do something wrong or forget something?

Author:  ChrisHalos [ Wed Dec 14, 2016 6:21 pm ]
Post subject:  Re: Cannot get my new YubiKey 4 to work in macOS Sierra

You still can't force Sierra to require a smart card...

viewtopic.php?f=23&t=2450#p9076

10.12.2 just dropped publicly yesterday (Dec 13, 2016) and this limitation is still present as it was in 10.12 and 10.12.1.

If you want to require the YubiKey for login, PAM continues to be the only option - https://www.yubico.com/wp-content/uploa ... gin_en.pdf

Author:  renekreijveld [ Thu Dec 15, 2016 1:00 pm ]
Post subject:  Re: Cannot get my new YubiKey 4 to work in macOS Sierra

Thanks for clarifying. So if I want the login in my Mac to like in the product video (https://vimeo.com/181838502) I would need PAM?

Author:  ChrisHalos [ Thu Dec 15, 2016 5:45 pm ]
Post subject:  Re: Cannot get my new YubiKey 4 to work in macOS Sierra

The video shows the PIV implementation, not PAM. With PIV, you can't force the requirement (only asks for the PIN when you plug it in), and you can't use it to log in at the FileVault screen (i.e. if you have FileVault enabled and you reboot, it's asking you to log into FileVault to decrypt your Mac, so only the password can be used here).

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/