Yubico Forum

Hi.

I encrypted my harddrive using filevault 2, and are using a static, quite strong, password to login into my user account.
However, when booting the OS and the harddrive is to be unlocked the input box doesn't accept my static password. I have used the utility to slow down the input of characters to 60ms but it still does not accept it and I have to manually type it every time the computer needs to be restarted.

Is this something I can fix? Or is this an Apple issue?

Hello,

It looks like your device does not support usb hid device at boot time, therefore you are unable to use the Yubikey at boot.

The Yubikey acts as a USB keyboard.

_________________
-Tom

I am sorry. I did not express myself better. The box do accept the input. It just validates the result as not matching my correct password.

Do you have different layout loaded once the OS is started?

_________________
-Tom

I am sorry I do not understand what you mean by layout. I use my yubikey successfully when logging in when the OS is up and running. Works like a charm. However when I need to use it to unencrypt my filevault2 (starting up the OS) I can input my password from the yubikey but the box shakes and reports that the password is wrong. So I need to type it manually, which I sometimes do also when logging in. That tells me that it is not the password stored in the yubikey that is to fault, but rather that the input box can not process it fast enough or something.

Ah, now I understand what you mean by layout. I don't know really. I googled and saw that it defaults to US qwerty when in filevault. I use happy hacking 2 /swedish layout in the OS. I will check it out and see if there is some kind of layout missmatch that could certainly be what produces this error.

I checked again whether or not one could change the layout during unlocking of filevault 2, and it is not possible from what I can see. This poses a real problem, is there any chance you could look into it? Typing it by hand is fine for me and now, but what if you have a static password that you have not memorized?
I understand OS X support is not top tier priority, but it is easier for me to persuade my boss to invest in yubikeys if these issues are sorted out.

Hi.

I have this exact problem as described as well.
It's missing keystrokes. Sometimes (often) the return stoke will be missed and I'm able to count the length of the input by pressing the back button. My static password is 32 characters long and contains no characters outside the 7 bit ascii range. The input from the yubikey is inconsistent, varying between 19 and 24 characters. The problem does not persist post boot.

skitapa: I'd be interested to hear if you've found a viable solution.

Hi there!

No unfortunately I have not found a solution but is forced to input my password every time I restart my computer. It's very annoying and I am glad to see that I am not the only one experiencing this issue.
I am however at a loss of how to move on from here.

Hi,

did you tried slowing down the Yubikey output of 60ms?

_________________
-Tom