MichaelGrafnetter / yubikey-minidriver-admx

YubiKey Smart Card Minidriver Administrative Template (ADMX)
MIT License
15 stars 3 forks source link

Added policy for blocking PUK on management key upgrade #2

Closed samicemalone closed 1 year ago

samicemalone commented 1 year ago

The article https://support.yubico.com/hc/en-us/articles/360015654560-Deploying-the-YubiKey-Minidriver-to-Workstations-and-Servers describes the feature as follows:

When a YubiKey is used with the YubiKey Minidriver for the first time, the YubiKey Minidriver checks to ensure default values are not being used for the management key and the PIN Unblock Code (PUK). If the default values are in use, the YubiKey Minidriver will upgrade the Management key to a protected value and block the PUK. A blocked PUK will prevent the PIN Unblock function from being active.

To prevent the PUK from being blocked, the local registry must be configured prior to setting up keys.

I have used Google Translate to create the French translations.

MichaelGrafnetter commented 1 year ago

@samicemalone Thanks for the PR!