Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 2:11 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 4 posts ] 
Author Message
PostPosted: Wed Dec 14, 2016 2:35 pm 
Offline

Joined: Wed Dec 14, 2016 2:23 pm
Posts: 2
Hi, I followed the procedure from https://www.yubico.com/support/knowledg ... os-sierra/ to setup a YubiKey 4 on macOS Sierra. I followed all steps and the last step was entering my login keychain password. After that I get no message (maybe that is as it should be).

Is there something additional that I shoud do?

I tried logging out and restarting my Mac without the YubiKey 4 inserted into a USB slot. Nowhere the system asks for the PIN or asks me to insert the YubiKey. When I am at the loginscreen and insert the YubiKey nothing happens.

Did I do something wrong or forget something?


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Dec 14, 2016 6:21 pm 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
You still can't force Sierra to require a smart card...

viewtopic.php?f=23&t=2450#p9076

10.12.2 just dropped publicly yesterday (Dec 13, 2016) and this limitation is still present as it was in 10.12 and 10.12.1.

If you want to require the YubiKey for login, PAM continues to be the only option - https://www.yubico.com/wp-content/uploa ... gin_en.pdf


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 15, 2016 1:00 pm 
Offline

Joined: Wed Dec 14, 2016 2:23 pm
Posts: 2
Thanks for clarifying. So if I want the login in my Mac to like in the product video (https://vimeo.com/181838502) I would need PAM?


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 15, 2016 5:45 pm 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
The video shows the PIV implementation, not PAM. With PIV, you can't force the requirement (only asks for the PIN when you plug it in), and you can't use it to log in at the FileVault screen (i.e. if you have FileVault enabled and you reboot, it's asking you to log into FileVault to decrypt your Mac, so only the password can be used here).


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Google [Bot] and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group