Yubico Forum
https://forum.yubico.com/

Mac OS X filevault 2, and static password doesn't work
https://forum.yubico.com/viewtopic.php?f=16&t=1142
Page 1 of 2

Author:  skitapa [ Thu Aug 22, 2013 9:53 am ]
Post subject:  Mac OS X filevault 2, and static password doesn't work

Hi.

I encrypted my harddrive using filevault 2, and are using a static, quite strong, password to login into my user account.
However, when booting the OS and the harddrive is to be unlocked the input box doesn't accept my static password. I have used the utility to slow down the input of characters to 60ms but it still does not accept it and I have to manually type it every time the computer needs to be restarted.

Is this something I can fix? Or is this an Apple issue?

Author:  Tom [ Thu Aug 22, 2013 10:48 am ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

Hello,

It looks like your device does not support usb hid device at boot time, therefore you are unable to use the Yubikey at boot.

The Yubikey acts as a USB keyboard.

Author:  skitapa [ Thu Aug 22, 2013 10:52 am ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

I am sorry. I did not express myself better. The box do accept the input. It just validates the result as not matching my correct password.

Author:  Tom [ Thu Aug 22, 2013 12:02 pm ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

Do you have different layout loaded once the OS is started?

Author:  skitapa [ Thu Aug 22, 2013 12:09 pm ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

I am sorry I do not understand what you mean by layout. I use my yubikey successfully when logging in when the OS is up and running. Works like a charm. However when I need to use it to unencrypt my filevault2 (starting up the OS) I can input my password from the yubikey but the box shakes and reports that the password is wrong. So I need to type it manually, which I sometimes do also when logging in. That tells me that it is not the password stored in the yubikey that is to fault, but rather that the input box can not process it fast enough or something.

Author:  skitapa [ Thu Aug 22, 2013 12:14 pm ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

Ah, now I understand what you mean by layout. I don't know really. I googled and saw that it defaults to US qwerty when in filevault. I use happy hacking 2 /swedish layout in the OS. I will check it out and see if there is some kind of layout missmatch that could certainly be what produces this error.

Author:  skitapa [ Thu Sep 19, 2013 10:01 am ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

I checked again whether or not one could change the layout during unlocking of filevault 2, and it is not possible from what I can see. This poses a real problem, is there any chance you could look into it? Typing it by hand is fine for me and now, but what if you have a static password that you have not memorized?
I understand OS X support is not top tier priority, but it is easier for me to persuade my boss to invest in yubikeys if these issues are sorted out.

Author:  mint [ Tue Feb 04, 2014 12:04 pm ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

Hi.

I have this exact problem as described as well.
It's missing keystrokes. Sometimes (often) the return stoke will be missed and I'm able to count the length of the input by pressing the back button. My static password is 32 characters long and contains no characters outside the 7 bit ascii range. The input from the yubikey is inconsistent, varying between 19 and 24 characters. The problem does not persist post boot.

skitapa: I'd be interested to hear if you've found a viable solution.

Author:  skitapa [ Tue Feb 04, 2014 12:09 pm ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

mint wrote:
Hi.

I have this exact problem as described as well.
It's missing keystrokes. Sometimes (often) the return stoke will be missed and I'm able to count the length of the input by pressing the back button. My static password is 32 characters long and contains no characters outside the 7 bit ascii range. The input from the yubikey is inconsistent, varying between 19 and 24 characters. The problem does not persist post boot.

skitapa: I'd be interested to hear if you've found a viable solution.


Hi there!

No unfortunately I have not found a solution but is forced to input my password every time I restart my computer. It's very annoying and I am glad to see that I am not the only one experiencing this issue.
I am however at a loss of how to move on from here.

Author:  Tom [ Tue Feb 04, 2014 1:22 pm ]
Post subject:  Re: Mac OS X filevault 2, and static password doesn't work

Hi,

did you tried slowing down the Yubikey output of 60ms?

Attachments:
Capture.PNG
Capture.PNG [ 11.76 KiB | Viewed 7006 times ]

Page 1 of 2 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/