| I was able to get this going, but it took awhile as I use a non-standard working mode. All of the docs I have read assume that you are logged in locally on the system, but if you are not (like me) then things fall apart. I am running a Windows 10 desktop, and then SSH into my local Linux box from Windows. Both systems are sitting next to me and I can press the Yubikey easily. My local Linux system is running Fedora 32 and I did the following to enable a user connected via SSH to use the Yubikey. Created a user group for yubikey users, which in reality only has me in it. Created a /etc/polkit-1/rules.d/99-pcsc-yubikey.rules file which gives smartcard access to the 'yubikey' group. Without this then 'ykman list' would not work. Created a /etc/udev/rules.d/99-yubikey.rules to give access to the 'yubikey' group. I used /lib/udev/rules.d/69-yubikey.rules as the starting point for my file. I had to add my two Yubikeys USB IDs (lsusb to see them) as they weren't present. Made sure to log out and back in to have the 'yubikey' group be active for my user. I vaguely remember a command that would do it, but I forgot it. After all of that I got it to work :) |