If you see inaccuracies in our content, please report the mistake via this form. If we have made an error or published misleading information, we will correct or clarify the article. Our editors thoroughly review and fact-check every article to ensure that our content meets the highest standards. Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. ZDNET's editorial team writes on behalf of you, our reader.

Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers. Neither ZDNET nor the author are compensated for these independent reviews.

This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. And we pore over customer reviews to find out what matters to real people who already own and use the products and services we’re assessing. We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. You can get the CLIENT_ID parameter value at pathToMappingFile is the path to the mapping file (/var/yubico_passwd).ĥ – Open /etc/ssh/sshd_config and set the following parameters: PubkeyAuthentication noĦ – Then restart the server using the ssh command: sudo service ssh restartįrom now on, during authorization, the user should be asked for the YubiKey code.ZDNET's recommendations are based on many hours of testing, research, and comparison shopping. The file should contain a single record: :Ĥ – Open /etc/pam.d/sshd and add to the very beginning: auth required pam_yubico.so id=CLIENT_ID debug authfile=pathToMappingFile with 3 Yubikey tokens: pam_user:cccccchvjdse:cccccchvtbdr:ccccccundggrģ – Create a mapping file, e.g. If you have several Yubikey tokens for one user, add YubiKey token ID of the other devices separated with :, e.g. Where username is the name of user who is going to authorize with YubiKey, and YubiKey token ID is a user's YubiKey token identification, e.g.: pam_user:cccccchvjdse 2 – Open /etc/passwd and add to the end of it: :

Yubikey mac