Instalación de Yubikey Manager

  ~ ❯ sudo apt install yubikey-manager yubikey-manager-qt
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
yubikey-manager is already the newest version (4.0.9-1).
The following additional packages will be installed:
  qml-module-io-thp-pyotherside qml-module-qt-labs-calendar
The following NEW packages will be installed:
  qml-module-io-thp-pyotherside qml-module-qt-labs-calendar yubikey-manager-qt
0 upgraded, 3 newly installed, 0 to remove and 505 not upgraded.
Need to get 4,606 kB of archives.
After this operation, 5,195 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://http.kali.org/kali kali-rolling/main amd64 qml-module-io-thp-pyotherside amd64 1.6.0-2+b3 [76.8 kB]
Get:2 http://http.kali.org/kali kali-rolling/main amd64 qml-module-qt-labs-calendar amd64 5.15.8+dfsg-2 [39.0 kB]
Get:3 http://http.kali.org/kali kali-rolling/main amd64 yubikey-manager-qt amd64 1.2.4-1+b1 [4,490 kB]
Fetched 4,606 kB in 2s (2,065 kB/s)             
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package qml-module-io-thp-pyotherside:amd64.
(Reading database ... 918730 files and directories currently installed.)
Preparing to unpack .../qml-module-io-thp-pyotherside_1.6.0-2+b3_amd64.deb ...
Unpacking qml-module-io-thp-pyotherside:amd64 (1.6.0-2+b3) ...
Selecting previously unselected package qml-module-qt-labs-calendar:amd64.
Preparing to unpack .../qml-module-qt-labs-calendar_5.15.8+dfsg-2_amd64.deb ...
Unpacking qml-module-qt-labs-calendar:amd64 (5.15.8+dfsg-2) ...
Selecting previously unselected package yubikey-manager-qt.
Preparing to unpack .../yubikey-manager-qt_1.2.4-1+b1_amd64.deb ...
Unpacking yubikey-manager-qt (1.2.4-1+b1) ...
Setting up qml-module-io-thp-pyotherside:amd64 (1.6.0-2+b3) ...
Setting up qml-module-qt-labs-calendar:amd64 (5.15.8+dfsg-2) ...
Setting up yubikey-manager-qt (1.2.4-1+b1) ...
Processing triggers for kali-menu (2023.1.7) ...
Processing triggers for desktop-file-utils (0.26-1) ...
Processing triggers for man-db (2.11.2-2) ...
Processing triggers for mailcap (3.70+nmu1) ...
  ~  8s ❯

Configuración de la YubiKey

Lanzar la aplicación nos lanza la siguiente ventana.

yubikey_manager

Una vez introducida nuestra llave.

yubikey_manager

Primeras recomendaciones. Cambiar los PIN, PUK y Management Key por defecto.

yubico_manager

En los tres casos tenemos la opción use default en caso de que sea la primera vez que configuramos nuestra YubiKey. La longitud mínimas de PIN y PUK es de 6 dígitos.

yubico_manager

Para la Management Key podemos explicitar el algoritmo de encriptado. Además podemos proteger su acceso utilizando el propio PIN.

yubico_manager

Con esto tendríamos nuestra YubiKey lista para ser usada como doble factor en los servicios que necesitemos y estén soportados.