Yubico Forum https://forum.yubico.com/ |
|
Cannot get my new YubiKey 4 to work in macOS Sierra https://forum.yubico.com/viewtopic.php?f=35&t=2503 |
Page 1 of 1 |
Author: | renekreijveld [ Wed Dec 14, 2016 2:35 pm ] |
Post subject: | Cannot get my new YubiKey 4 to work in macOS Sierra |
Hi, I followed the procedure from https://www.yubico.com/support/knowledg ... os-sierra/ to setup a YubiKey 4 on macOS Sierra. I followed all steps and the last step was entering my login keychain password. After that I get no message (maybe that is as it should be). Is there something additional that I shoud do? I tried logging out and restarting my Mac without the YubiKey 4 inserted into a USB slot. Nowhere the system asks for the PIN or asks me to insert the YubiKey. When I am at the loginscreen and insert the YubiKey nothing happens. Did I do something wrong or forget something? |
Author: | ChrisHalos [ Wed Dec 14, 2016 6:21 pm ] |
Post subject: | Re: Cannot get my new YubiKey 4 to work in macOS Sierra |
You still can't force Sierra to require a smart card... viewtopic.php?f=23&t=2450#p9076 10.12.2 just dropped publicly yesterday (Dec 13, 2016) and this limitation is still present as it was in 10.12 and 10.12.1. If you want to require the YubiKey for login, PAM continues to be the only option - https://www.yubico.com/wp-content/uploa ... gin_en.pdf |
Author: | renekreijveld [ Thu Dec 15, 2016 1:00 pm ] |
Post subject: | Re: Cannot get my new YubiKey 4 to work in macOS Sierra |
Thanks for clarifying. So if I want the login in my Mac to like in the product video (https://vimeo.com/181838502) I would need PAM? |
Author: | ChrisHalos [ Thu Dec 15, 2016 5:45 pm ] |
Post subject: | Re: Cannot get my new YubiKey 4 to work in macOS Sierra |
The video shows the PIV implementation, not PAM. With PIV, you can't force the requirement (only asks for the PIN when you plug it in), and you can't use it to log in at the FileVault screen (i.e. if you have FileVault enabled and you reboot, it's asking you to log into FileVault to decrypt your Mac, so only the password can be used here). |
Page 1 of 1 | All times are UTC + 1 hour |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |