Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:11 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Sat Feb 27, 2016 2:20 pm 
Offline

Joined: Sat Feb 27, 2016 12:47 pm
Posts: 4
Hello,
After enabling the Logon feature on my W10 Pro 64-bits (v10.0 #10240), I'm unable to use it and after few failures, it crash the system (like a power off..., black screen - not the BSOD).

1) Enable the feature, test is correct.
2) Reboot
3) Try to logon. Unable :(
I viewed this video to check if I was wrong... https://www.youtube.com/watch?v=2J0irt4Pons
a) With the standard account icon on the logon screen
b) With the password's icon (it displays: YubiKey Logon enabled for user)
5) If I press the key button, the OTP seems to be used instead of my password, not good.
4) After few failures (3/4), the system crash

Various messages displayed (in french):
- Echec de l'appel de procédure distante.
- Etat:
- Descripteur non valide

By the way, when it become to goes wrong, I'm unable to use other's accounts not linked with the YubiKey.
I disabled the feature at this time.

Any clues to help me to be an happy user :)?
Regards,
Philippe


Attachments:
File comment: Event viewer report
W10LogonCrash.png
W10LogonCrash.png [ 7.55 KiB | Viewed 906 times ]
File comment: Settings
W10LogonTest.png
W10LogonTest.png [ 8.4 KiB | Viewed 906 times ]
Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Sun Feb 28, 2016 3:52 am 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
You selected "require user input (button press)" when programming the Challenge-Response. You CANNOT do this when implementing Windows Login.

https://www.yubico.com/applications/com ... ows-login/

Step 1: Configure your YubiKey for challenge-response using HMAC-SHA1 with variable input for slot 2. For instructions on how to do this using the YubiKey Personalization Tool, review the instructions in the Yubico Windows Login Guide (available in PDF format from our Documentation page). When configuring your YubiKey, be sure that “Require user input (button press)” is not selected.


Top
 Profile  
Reply with quote  
PostPosted: Sun Feb 28, 2016 12:26 pm 
Offline

Joined: Sat Feb 27, 2016 12:47 pm
Posts: 4
Hi Chris,
Thanks for pointing me to always read the manual first, the truth is in there ;). My fault.
Well spotted, that was the option not to check. Now it works.
I have few remarks:
1) This doesn't excuse the solution to make the system unstable (euphemism) with this wrong configuration. Something to do maybe...
2) The doc is fine but obsolete. XP is a dead OS now. In W10, you'll see 2 icons at logon after that change.
- The 'password' one (with a key as icon), the one to use with the YubiKey (otherwise displays: 'YubiKey Logon failed, is there a YubiKey inserted?');
- The previous one (with the user's picture), which become no more usable (otherwise displays: 'Etat :'...). It should be a good idea to display something after the 'State:' in order to know why and what to do.
Additional question: Is there a way to display only one icon by user (the 'key' one with YubiKey, and the usual one for others)?
Regards,
Philippe


Attachments:
File comment: Multiple icons @ logon.
W10LogonIcons.png
W10LogonIcons.png [ 112.46 KiB | Viewed 890 times ]
File comment: Subliminal message @ logon.
W10FailToConnect.png
W10FailToConnect.png [ 38.22 KiB | Viewed 890 times ]
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Google [Bot] and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group