Yubico Forum
https://forum.yubico.com/

[SOLVED] - Windows logon with multiple Yubikeys
https://forum.yubico.com/viewtopic.php?f=23&t=844
Page 1 of 1

Author:  InfoSolutions [ Fri Aug 10, 2012 8:38 am ]
Post subject:  [SOLVED] - Windows logon with multiple Yubikeys

Hi all,

I have successfully configured 2 Yubikeys for Windows 7 Pro logon. Works flawlessly, except that I can only use one key for the specific Windows user at any one time. i.e. I can't configure any user with more than one key.

I read on another post on the forum that this should work, provided the two keys have the same secret key (which I think is logical). Only problem is that during the slot configuration in the personalization tool, the secret key is randomly generated anew for each inserted key.

I already use my two keys for Lastpass and my Wordpress site without any problems at all after setting them up correctly, so can't understand why it seems as if the two keys can't both be simultaneously set up for the same Windows user as well.

Does anyone know how this can be done (Preferably without needing another third-party software?

Any help much appreciated.

Author:  Klas [ Fri Aug 10, 2012 8:56 am ]
Post subject:  Re: Windows logon with multiple Yubikeys

Hello,

The only way to achieve this (as the software is written now) is to have the same sha1 key on both keys.

With the Cross platform personalization tool this can be achieved by not selecting "program multiple keys", but program them one after the other:
* confirm the settings are what you want
* insert first key
* click "write configuration"
* replace first key with second
* click "write configuration"

That should leave you with two keys with the same secret.

/klas

Author:  InfoSolutions [ Fri Aug 10, 2012 9:24 am ]
Post subject:  Re: Windows logon with multiple Yubikeys

Absolutely brilliant! :D

Thanks for the very quick response. Problem now completely resolved.

Author:  rogik [ Fri Feb 08, 2013 7:15 pm ]
Post subject:  Re: Windows logon with multiple Yubikeys

Thanks! This worked like a charm!

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/