| Yubico Forum https://forum.yubico.com/ |
|
| Yubikey PIV as 2FA with MacOS Sierra https://forum.yubico.com/viewtopic.php?f=26&t=2460 |
Page 1 of 1 |
| Author: | Fred [ Tue Oct 18, 2016 10:49 pm ] |
| Post subject: | Yubikey PIV as 2FA with MacOS Sierra |
Hi, I have set up my Yubikey NEO with PIV Manager in MacOS Sierra and I'm able to login with it. But it's not working like I would like it to work. I would like to use it like 2FA, so my normal password + the yubikey. And disable all other ways to login so it's impossible to login without the Yubikey. Is this possible?  Thanks! 
|
|
| Author: | Fred [ Tue Oct 18, 2016 10:54 pm ] |
| Post subject: | Re: Yubikey PIV as 2FA with MacOS Sierra |
Aha, I just found out MacOS Sierra supports only numeric PINS. While you can enter alphanumeric PINS in the tool, and can use them on other platforms, these PINS are not accepted on macOS. So I have to use PIN + Yubikey But still looking how to disable the password. |
|
| Author: | Fred [ Tue Oct 25, 2016 12:54 am ] |
| Post subject: | Re: Yubikey PIV as 2FA with MacOS Sierra |
I have a problem, When I log out my password isn't working anymore. The only solution is a hard reset. I can't login anymore. 
|
|
| Author: | mouse008 [ Thu Dec 01, 2016 5:11 am ] |
| Post subject: | Re: Yubikey PIV as 2FA with MacOS Sierra |
MacOS allows you to login using a token. But it does not forbid login using password. You cannot disable passwords without using some extra software, like Centrify (pretty expensive) or SmartCardVerify plugin (in the process of becoming open source). The purpose of those is exactly to prevent password-based login. Unless you're running a business, probably blocking passwords altogether is not a very good idea. |
|
| Page 1 of 1 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|