It took me round about five hours but ... finally managed to migrate all U2F keys, FIDO2 credentials, TOTP codes and PGP keys from my five Yubikeys to my four new #Token2 smartcards.

Apart from at Microsoft (work account, not my fault), migration worked like a chram everywhere.

Now finally running a PC/SC only smartcard setup for disk encryption, U2F, FIDO2, TOTP and PGP.

Damn, so much security. Oh, and what funny policies of multi factors, FIDO, TOTP and what else you can encounter 😅 ...

Follow

@braid
What is the reason for such migration? Disk encryption with pc/sc sounds tricky. Is it supported by any major distribution?

@artiom The reason was simply to clean up the mess of five different Yubikeys used for various different things. And about PC/SC in initramfs, you just need to include some binaries and a systemd unit file : github.com/LudovicRousseau/PCS

Sign in to participate in the conversation
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml