Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-08-07 06:02:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

fix: should be 40 characters, not 20

Browse source 
also updated example key to be more obviously an example
This commit is contained in:
Jordan Mynes 2025-04-09 13:18:55 -05:00 • committed by GitHub
parent 35e595d004
commit 91b0aee350
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
user/security-in-qubes/mfa.md
View file

@ -207,16 +207,16 @@ website](https://docs.nitrokey.com/software/nitropy/all-platforms/installation).
YubiKey](https://www.qubes-os.org/doc/how-to-use-usb-devices/) to this app qube YubiKey](https://www.qubes-os.org/doc/how-to-use-usb-devices/) to this app qube
though) or directly on the sys-usb vm. though) or directly on the sys-usb vm.
This command will configure your Yubikey, given a 20 character (all lowercase) secret key, like the example below: This command will configure your Yubikey, given a 40 character (all lowercase) secret key, like the example below:
`ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -ochal-btn-trig -a 303132333435363738393a3b3c3d3e3f40414243` `ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -ochal-btn-trig -a 0123456789abcdef0123456789abcdef01234567`
With the following settings: With the following settings:
- Configuration Slot: `2`, - Configuration Slot: `2`,
- Challenge-Response Mode: `HMAC-SHA1`, - Challenge-Response Mode: `HMAC-SHA1`,
- Require usser input (Optional, but Recommended): `true`, - Require usser input (Optional, but Recommended): `true`,
- HMAC-SHA1 Mode: `fixed 64 bit input` - HMAC-SHA1 Mode: `fixed 64 bit input`
- Secret Key (example): `303132333435363738393a3b3c3d3e3f40414243` - Secret Key (example): `0123456789abcdef0123456789abcdef01234567`
**Yubikey (via GUI)** **Yubikey (via GUI)**