search

Yubico / yubikey-manager

Python library and command line tool for configuring any YubiKey over all USB interfaces.
https://developers.yubico.com/yubikey-manager/
BSD 2-Clause "Simplified" License
852 stars 123 forks source link

Configure alwaysUv? #499

Closed Manouchehri closed 6 months ago

Manouchehri commented 2 years ago

Not entirely sure if this the right place to ask, but is it possible to configure alwaysUv? i.e. to disable it.

Support for listing alwaysUv was added in df1774a190c9588fc6f5fac69cebcb78f1471903.

https://github.com/Yubico/yubikey-manager/blob/df1774a190c9588fc6f5fac69cebcb78f1471903/ykman/cli/fido.py#L134-L139

cc @dainnilsson

dainnilsson commented 2 years ago

There is no command in ykman to configure always_uv, but the functionality is available in the python-fido2 library: https://github.com/Yubico/python-fido2/blob/0.9.3/fido2/ctap2/config.py#L88 so you could potentially script it yourself.

Manouchehri commented 2 years ago

There is no command in ykman to configure always_uv, but the functionality is available in the python-fido2 library: https://github.com/Yubico/python-fido2/blob/0.9.3/fido2/ctap2/config.py#L88 so you could potentially script it yourself.

Do you know if any YubiKey models support setting it though?

dainnilsson commented 2 years ago

As far as I'm aware, any YubiKey that supports alwaysUv also supports toggling it. I believe that's only the YubiKey Bio at the moment.

dainnilsson commented 6 months ago

ykman 5.3.0 now supports toggling alwaysUv through the CLI.

kathampy commented 1 month ago

@dainnilsson Do you know if it works with 5 series keys on the latest firmware?

dainnilsson commented 1 month ago

AlwaysUV should be supported on YubiKey 5.5 and later.