Yubikey
Securing SSH with FIDO U2F (YubiKey) on Debian
FIDO devices are supported by the public key types „ecdsa-sk“ and „ed25519-sk“, along with corresponding certificate types. This is supported in OpenSSH from version 8.2. Debian Buster (stable) delivers version 7.9, so we need to install a newer version via Debian Buster Backports. If you use Debian unstable or read this when Debian Bullseye is […]
Ubuntu Yubikey U2F Auth
Yubikey is a hardware security device. You can use it for two-factor authentication. Here is an example setup for two-factor login for Ubuntu Linux. I recommend to use at least two Yubikeys. One primary and the second one as a backup device. I used mostly the official HowTo for this: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F 1. Setup First add […]