Doing windows logon correctly and securely is very complicated and requires sophisticated software, which is why you find partners writing solutions for this. My company makes AuthLite so of course I think it's the best way to do windows logon with the yubikey. The solutions are very reasonably priced for a single user, in fact, and I very much doubt you'll find a better value.
But! it's still possible to get some value for free if you like: * Program one identity of the yubikey to a static password * Use that as *part* of the password you enter into windows * And enter the remainder of the password characters yourself
In this manner you get an inexpensive two factor solution, although it is not OTP-based it's still far stronger than any password you could remember in your head alone.
|