PKI using the Yubikey

Products Password Secure Ideas
,
1

What is a one sentence summary of your feature request?

Use the MFA with Cert on the Yubikey

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

We want to login dirket with the Cert in the lokal Setting.

How do you currently solve the challenges you have by not having this feature?

With Authenticator

2

If you want to be logged in with your user certificate and PIN from your Yubikey insted of the ad-user password… thats what is already possible. Set “Edit first factor” in the Global user Settings or specific organisational unit / user setting for Windows application to “Smartcard”.

PS: If you want to let the users use the web app, you can set the FIDO2 for web application.

image
image3382×1264 237 KB

3

Is FIDO2 functionality exclusively available when users are operating in Master Key Mode? Given that our users are currently in E2EE Mode, does this imply that FIDO2 cannot be utilized in E2EE Mode?

4

Now I see it. It’s solely for the app.