less than 1 minute read

Fido2 là xu thế sử dụng passwordless đang được dùng rộng rãi. Nhân dịp vừa xin được key dùng thử thì mình setup login bằng vinccss key luôn.

Trên linux cần cài pam-u2f và libfido2 packages từ Yubico.

Xem key info:
fido2-token -I /dev/hidraw0

Setup pin cho VinCSS key
fido2-token -S /dev/hidraw0

Setup token cho pam-u2f
pamu2fcfg -N -u [user] >> ~/.config/Yubico/u2f_keys

Setup pam trong /etc/pam.d/system-auth
auth sufficient pam_u2f.so pinverification=1 cue

Test:
sudo pacman -Syu

You may also enjoy

Fido2 and banking use cases

2 minute read

Fido2 is not only passwordless authentication, but also it can sign anything you need. Nowadays, we know Fido2 as passwordless authentication - which initial...

Certificate Transparency and Mobile Security

1 minute read

Introduce about Certificate Transparency Web Public Key Infrastructure (Web PKI) helps us on privacy and security. Trusted Certificate Authorities issue cert...

Fido notes

1 minute read

U2F vs Fido2 Fido U2F is renamed to CTAP1. FIDO UAF: FIDO Universal Authentication Framework. WebAuthn: New API supports passwordless login, compatible wit...