Yubico - Second Authentication Factor
Installing Yubikey Manager
~ ❯ sudo apt install yubikey-manager yubikey-manager-qt
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
yubikey-manager is already the newest version (4.0.9-1).
The following additional packages will be installed:
qml-module-io-thp-pyotherside qml-module-qt-labs-calendar
The following NEW packages will be installed:
qml-module-io-thp-pyotherside qml-module-qt-labs-calendar yubikey-manager-qt
0 upgraded, 3 newly installed, 0 to remove and 505 not upgraded.
Need to get 4,606 kB of archives.
After this operation, 5,195 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://http.kali.org/kali kali-rolling/main amd64 qml-module-io-thp-pyotherside amd64 1.6.0-2+b3 [76.8 kB]
Get:2 http://http.kali.org/kali kali-rolling/main amd64 qml-module-qt-labs-calendar amd64 5.15.8+dfsg-2 [39.0 kB]
Get:3 http://http.kali.org/kali kali-rolling/main amd64 yubikey-manager-qt amd64 1.2.4-1+b1 [4,490 kB]
Fetched 4,606 kB in 2s (2,065 kB/s)
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package qml-module-io-thp-pyotherside:amd64.
(Reading database ... 918730 files and directories currently installed.)
Preparing to unpack .../qml-module-io-thp-pyotherside_1.6.0-2+b3_amd64.deb ...
Unpacking qml-module-io-thp-pyotherside:amd64 (1.6.0-2+b3) ...
Selecting previously unselected package qml-module-qt-labs-calendar:amd64.
Preparing to unpack .../qml-module-qt-labs-calendar_5.15.8+dfsg-2_amd64.deb ...
Unpacking qml-module-qt-labs-calendar:amd64 (5.15.8+dfsg-2) ...
Selecting previously unselected package yubikey-manager-qt.
Preparing to unpack .../yubikey-manager-qt_1.2.4-1+b1_amd64.deb ...
Unpacking yubikey-manager-qt (1.2.4-1+b1) ...
Setting up qml-module-io-thp-pyotherside:amd64 (1.6.0-2+b3) ...
Setting up qml-module-qt-labs-calendar:amd64 (5.15.8+dfsg-2) ...
Setting up yubikey-manager-qt (1.2.4-1+b1) ...
Processing triggers for kali-menu (2023.1.7) ...
Processing triggers for desktop-file-utils (0.26-1) ...
Processing triggers for man-db (2.11.2-2) ...
Processing triggers for mailcap (3.70+nmu1) ...
~ 8s ❯
Configuring YubiKey
Launching the application launches the following window.
Once our key is inserted.
First recommendations. Change the default PIN, PUK and Management Key.
In all three cases we have the option use default in case it is the first time we configure our YubiKey. The minimum length of PIN and PUK is 6 digits.
For the Management Key we can specify the encryption algorithm. We can also protect its access using the PIN itself.
With this we would have our YubiKey ready to be used as a double factor in the services we need and are supported.