User:Mparfeni - Revision history

Mparfeni: /* Local Authentication Using Challenge Response */

2017-06-06T00:39:50Z

Local Authentication Using Challenge Response

← Older revision		Revision as of 03:39, 6 June 2017
Line 44:		Line 44:
	[[File:SignInScreen8copy-444x215.jpg\|center]]		[[File:SignInScreen8copy-444x215.jpg\|center]]

	== Local Authentication Using Challenge Response ==		== Local Authentication Using Challenge Response(sudo) ==
	The PAM module can utilize the HMAC-SHA1 Challenge-Response mode found in YubiKeys starting with version 2.2 for offline authentication. This mode is useful if you don’t have a stable network connection to the YubiCloud.		The PAM module can utilize the HMAC-SHA1 Challenge-Response mode found in YubiKeys starting with version 2.2 for offline authentication. This mode is useful if you don’t have a stable network connection to the YubiCloud.

Mparfeni: /* References */

2017-06-06T00:39:04Z

References

← Older revision		Revision as of 03:39, 6 June 2017
Line 421:		Line 421:
	2.https://wiki.archlinux.org/index.php/yubikey Yubikey wiki		2.https://wiki.archlinux.org/index.php/yubikey Yubikey wiki

	3.https://www.yubico.com/support/knowledge-base/~~categories~~/~~articles~~/~~happens~~-~~lose~~-~~yubikey/ Knowledge base for yubikey~~		3.https://www.yubico.com/support/knowledge-base/ Knowledge base for yubikey

			4.https://developers.yubico.com/yubico-pam/Authentication_Using_Challenge-Response.html Local Authentication Using Challenge Response

	[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]		[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Mparfeni at 00:36, 6 June 2017

2017-06-06T00:36:37Z

← Older revision		Revision as of 03:36, 6 June 2017
Line 410:		Line 410:

	A: Use the service’s authentication recovery method.		A: Use the service’s authentication recovery method.

			== Author ==

			Mark Parfeniuk C11, Estonian IT College.

	== References ==		== References ==
Line 418:		Line 422:

	3.https://www.yubico.com/support/knowledge-base/categories/articles/happens-lose-yubikey/ Knowledge base for yubikey		3.https://www.yubico.com/support/knowledge-base/categories/articles/happens-lose-yubikey/ Knowledge base for yubikey

			[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Mparfeni: /* Removing sertificates from yubikey */

2017-06-06T00:34:27Z

Removing sertificates from yubikey

← Older revision		Revision as of 03:34, 6 June 2017
Line 373:		Line 373:
	To reset the PIV applet on the YubiKey to completely remove the certificates and set the PIN to default		To reset the PIV applet on the YubiKey to completely remove the certificates and set the PIN to default

	Use this procedure if you want to completely remove the certificates created when you installed the YubiKey PIV Manager to pair your YubiKey with ~~macOS Sierra~~. If you want to keep your certificates, skip to the next procedure.		Use this procedure if you want to completely remove the certificates created when you installed the YubiKey PIV Manager to pair your YubiKey with your computer. If you want to keep your certificates, skip to the next procedure.

	#Open the YubiKey PIV Manager.		#Open the YubiKey PIV Manager.
Line 387:		Line 387:
	#Click Reset device.		#Click Reset device.
	#Click OK.		#Click OK.
	To delete the only the certificates created following the OS login instructions		To delete the only the certificates created following the compute login instructions

	Use this procedure if you want to remove only the certificates created for OS login.		Use this procedure if you want to remove only the certificates created for computer login.

	#Open the YubiKey PIV Manager.		#Open the YubiKey PIV Manager.

Mparfeni: /* Removing sertificates from yubikey */

2017-06-06T00:33:40Z

Removing sertificates from yubikey

← Older revision		Revision as of 03:33, 6 June 2017
Line 387:		Line 387:
	#Click Reset device.		#Click Reset device.
	#Click OK.		#Click OK.
	To delete the only the certificates created following the ~~macOS Sierra~~ login instructions		To delete the only the certificates created following the OS login instructions

	Use this procedure if you want to remove only the certificates created for OS login.		Use this procedure if you want to remove only the certificates created for OS login.

Mparfeni: /* Removing sertificates from yubikey */

2017-06-06T00:33:19Z

Removing sertificates from yubikey

← Older revision		Revision as of 03:33, 6 June 2017
Line 396:		Line 396:
	#On the Key Management tab, click Delete certificate.		#On the Key Management tab, click Delete certificate.

	~~REMOVING THE YUBIKEY PIV MANAGER APPLICATION~~		Removing the yubikey piv manager application

	To remove YubiKey PIV Manager, drag the application to the Trash.		To remove YubiKey PIV Manager, drag the application to the Trash.

Mparfeni: /* Logging in to your Google Account */

2017-06-06T00:32:24Z

Logging in to your Google Account

← Older revision		Revision as of 03:32, 6 June 2017
Line 42:		Line 42:
	#:*If you want to trust this computer for a short period of time, so you do not have to insert your YubiKey each time you log in, check the box to Remember this computer for 30 days.		#:*If you want to trust this computer for a short period of time, so you do not have to insert your YubiKey each time you log in, check the box to Remember this computer for 30 days.
	#:*If you do not have your YubiKey with you, click Use a verification code instead.		#:*If you do not have your YubiKey with you, click Use a verification code instead.
	[[File:SignInScreen8copy-444x215.jpg]]		[[File:SignInScreen8copy-444x215.jpg\|center]]

	== Local Authentication Using Challenge Response ==		== Local Authentication Using Challenge Response ==

Mparfeni: /* Logging in to your Google Account */

2017-06-06T00:30:25Z

Logging in to your Google Account

← Older revision		Revision as of 03:30, 6 June 2017
Line 42:		Line 42:
	#:*If you want to trust this computer for a short period of time, so you do not have to insert your YubiKey each time you log in, check the box to Remember this computer for 30 days.		#:*If you want to trust this computer for a short period of time, so you do not have to insert your YubiKey each time you log in, check the box to Remember this computer for 30 days.
	#:*If you do not have your YubiKey with you, click Use a verification code instead.		#:*If you do not have your YubiKey with you, click Use a verification code instead.
			[[File:SignInScreen8copy-444x215.jpg]]

	== Local Authentication Using Challenge Response ==		== Local Authentication Using Challenge Response ==

Mparfeni: /* Logging in to your Google Account */

2017-06-06T00:27:36Z

Logging in to your Google Account

← Older revision		Revision as of 03:27, 6 June 2017
Line 37:		Line 37:
	Logging in to your Google account with your YubiKey is refreshingly simple.		Logging in to your Google account with your YubiKey is refreshingly simple.

	The next time you need to login to your Google account, insert your YubiKey.		#The next time you need to login to your Google account, insert your YubiKey.
	Enter your user name and password, and click Sign in.		#Enter your user name and password, and click Sign in.
	When the YubiKey begins to blink, tap it.		#When the YubiKey begins to blink, tap it.
	If you want to trust this computer for a short period of time, so you do not have to insert your YubiKey each time you log in, check the box to Remember this computer for 30 days.		#:*If you want to trust this computer for a short period of time, so you do not have to insert your YubiKey each time you log in, check the box to Remember this computer for 30 days.
	If you do not have your YubiKey with you, click Use a verification code instead.		#:*If you do not have your YubiKey with you, click Use a verification code instead.


	== Local Authentication Using Challenge Response ==		== Local Authentication Using Challenge Response ==

Mparfeni: /* Setting up your Google Account */

2017-06-06T00:27:09Z

Setting up your Google Account

← Older revision		Revision as of 03:27, 6 June 2017
Line 30:		Line 30:
	#Add a Security Key for 2-step verification. (We recommend that you add two YubiKeys, or Security Keys. They can be used interchangeably, or one can be your primary device, and one can be a backup device.		#Add a Security Key for 2-step verification. (We recommend that you add two YubiKeys, or Security Keys. They can be used interchangeably, or one can be your primary device, and one can be a backup device.
	#Be sure to save backup codes (you will use these if you are ever logging in without your YubiKey). To do this, scroll down after you have added your YubiKey(s) and, under Backup codes, click Show Codes. Click Download or Print, and save the codes in a safe location.		#Be sure to save backup codes (you will use these if you are ever logging in without your YubiKey). To do this, scroll down after you have added your YubiKey(s) and, under Backup codes, click Show Codes. Click Download or Print, and save the codes in a safe location.
	You can also set up Google Authenticator to generate verification codes if you don’t have your YubiKey. The Authenticator app can receive codes even if you are not connected to the internet.		#:*You can also set up Google Authenticator to generate verification codes if you don’t have your YubiKey. The Authenticator app can receive codes even if you are not connected to the internet.
	Your YubiKey is now registered to your account as your default Two-Step Verification device! The screen now displays all devices that are registered to your account, so you can easily add another Security Key, or remove registered keys. (If you accidentally lose a YubiKey, come here and remove that YubiKey from your account. No one could log on to your account, though, because they would still need to know your username and password.)		Your YubiKey is now registered to your account as your default Two-Step Verification device! The screen now displays all devices that are registered to your account, so you can easily add another Security Key, or remove registered keys. (If you accidentally lose a YubiKey, come here and remove that YubiKey from your account. No one could log on to your account, though, because they would still need to know your username and password.)