[midtake]

If you create a piv certificate on a yubikey and just plug it in while logged in, it automatically registers it as a login method.

[akdev1l]

Yeah but then it will only use the certificate on the yubikey and not ask for a password so we’re back to 1FA

[midtake]

It's 2FA because you need the pin for the Yubikey as well.