Yubico Forum
https://forum.yubico.com/

Anyone have a suggestion on how to do PFSense with a Yubikey
https://forum.yubico.com/viewtopic.php?f=23&t=2582
Page 1 of 1

Author:  jesse [ Mon Feb 27, 2017 9:11 am ]
Post subject:  Anyone have a suggestion on how to do PFSense with a Yubikey

To give some more information: We are setting up a secure environment at work for projects that are controlled per NIST 800-171, which is more or less the corporate/public version of NITS 800-53. This requires, among other things, two factor authentication for some things. We are using Yubikeys in particular the NIST PIV smartcard function. Works great, we have a set up CAs set up, certificates associated with AD accounts, and computers happily logging in using Yubikey and PIN.

Well the whole thing is going to live behind some PFSense firewalls so I'd like to do 2-factor with their Webadmin as well, if I can. However I can't work out any way to making them auth against the Yubikey. It's pretty clearly something they are not designed to support by default.

Anyone ever do this, or have any ideas to try? Wouldn't have to be using the smart card feature (though that would be the nicest) U2F or anything else would work as well.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/