Yubico Forum

Hi all
I am very new to Yubikeys and only just received one the other day. They look very cool and I have had some success getting the device to work.

I am wanting to know if anyone has managed to implement their own Yubikey authentication in a Windows 2012 server environment - Active Directory?

Basically I have a Windows 2012 domain controller and a number of Windows 7 & 8 PCs connected to the local domain.
I want to setup OTP so that a user logons onto their PC using their Yubikey and they are validated by Active Directory.

I also have a number of remote stand alone Windows 7 & 8 PCs that use RDP to connect to a Terminal Server. I would also like to secure these PCs through the use of a users Yubikey.

I have read a lot of articles and purchasing a product such as Rohos or Authlite seems to be the only way to go but licensing may become expensive.

I was hoping to see if I could build whatever was necessary rather than using a proprietary software system.
I have read up about Yubix and this may seem the way to go.
I have VMWare and have built a Yubix server using the VMDK that's available. This all looks good but now I'm getting confused with how everything hooks up with Active Directory. I gather I need to use FreeRadius connected to Active Directory via LDAP. Am I correct?

Can someone let me know if I am heading in the right direction?

Also can someone please explain to me what software would I have to install on each of the client PCs & Terminal Server to change the login page so that it accepts the Yubikey information.

Thanks in advance.
Andy

piv works out of the box, look at the PIV tools.

Thanks for the information. Will have a read and see what what it does.
I did notice that it refers to Yubikey Neo. I only have a Yubkiey standard.
Will PIV work with a standard Yubikey?

No, the Yubikey Standard is not a smartcard.

You will need the Yubikey NEO, which is a composite device.
https://www.yubico.com/products/yubikey-hardware/

Hmmm.. I don't have the NEO so I may have to rethink this.
Thanks for your help.

If anyone has any luck with Yubikey and windows logon please let me know.
Any information would be appreciated.

Thanks
Andy

Have a look at LinOTP http://www.linotp.org/