Yubico Forum

Hello,
After enabling the Logon feature on my W10 Pro 64-bits (v10.0 #10240), I'm unable to use it and after few failures, it crash the system (like a power off..., black screen - not the BSOD).

1) Enable the feature, test is correct.
2) Reboot
3) Try to logon. Unable
I viewed this video to check if I was wrong... https://www.youtube.com/watch?v=2J0irt4Pons
a) With the standard account icon on the logon screen
b) With the password's icon (it displays: YubiKey Logon enabled for user)
5) If I press the key button, the OTP seems to be used instead of my password, not good.
4) After few failures (3/4), the system crash

Various messages displayed (in french):
- Echec de l'appel de procédure distante.
- Etat:
- Descripteur non valide

By the way, when it become to goes wrong, I'm unable to use other's accounts not linked with the YubiKey.
I disabled the feature at this time.

Any clues to help me to be an happy user ?
Regards,
Philippe

You selected "require user input (button press)" when programming the Challenge-Response. You CANNOT do this when implementing Windows Login.

https://www.yubico.com/applications/com ... ows-login/

Step 1: Configure your YubiKey for challenge-response using HMAC-SHA1 with variable input for slot 2. For instructions on how to do this using the YubiKey Personalization Tool, review the instructions in the Yubico Windows Login Guide (available in PDF format from our Documentation page). When configuring your YubiKey, be sure that “Require user input (button press)” is not selected.

Hi Chris,
Thanks for pointing me to always read the manual first, the truth is in there . My fault.
Well spotted, that was the option not to check. Now it works.
I have few remarks:
1) This doesn't excuse the solution to make the system unstable (euphemism) with this wrong configuration. Something to do maybe...
2) The doc is fine but obsolete. XP is a dead OS now. In W10, you'll see 2 icons at logon after that change.
- The 'password' one (with a key as icon), the one to use with the YubiKey (otherwise displays: 'YubiKey Logon failed, is there a YubiKey inserted?');
- The previous one (with the user's picture), which become no more usable (otherwise displays: 'Etat :'...). It should be a good idea to display something after the 'State:' in order to know why and what to do.
Additional question: Is there a way to display only one icon by user (the 'key' one with YubiKey, and the usual one for others)?
Regards,
Philippe