Yubico Forum

For security reasons I was wondering if there is a way to disable the "YubiKey Logon enabled for this user" on the logon screen. If I am traveling to a foreign country and they want me to logon to my account I can separate the key from the computer, but I don't want them to know to look for anything I might be carrying.

Thanks for any help.

Hello,

Only do this if you're comfortable about changing the registry. The warning messages from the YubiKey Logon module will be garbled if you do this as the frontend parts will be completely disabled.

It's not doable in any straight-forward way.. though if you're up to some fiddling in the registry it can be done:
* start regedit
* navigate to the key: "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication
* under both "Credential Provider Filters" and "Credential Providers" There should be a category namned "{0f33b914-4f18-4824-8880-29bbe2e05179}"
* export both of them to a file (if you are interested in being able to restore the functionality).
* delete them.
* when/if you want to restore that functionality, run the files you exported.

/klas