When your device flashes, touch the contact to associate the key with your account. This is up to personal preference, but here we'll create it under /etc. To get around this, we need to create the configuration somewhere that isn't encrypted.

The Yubico guide creates the configuration in your home directory, but if your home directory is encrypted, you will be unable to access that on a reboot. This is based on the Yubico guide with some changes to the scope of protection.įirst, enable the Yubico PPA and install the U2F PAM module: sudo add-apt-repository ppa:yubico/stable & sudo apt-get update It should work with any security key that supports the U2F spec including most YubiKeys. I have tested this with a YubiKey 4 and confirm it works. As always, back up all files before changing them, have a live disk ready to revert changes if required and research anything you are unsure of to understand what is happening. I take no responsibility for any badness that results from these instructions.

Disclaimer: This guide changes the default PAM configuration which has the potential to lock you out of your computer.

Yubico u2f security key