YubiKey Support
In this section, you'll find how to set up a server for YubiKey authentication.
1. Run to set up required packets:
sudo add-apt-repository ppa:yubico/stablesudo apt-get updatesudo apt-get install libpam-yubico
sudo yum install pam_yubico
sudo yum install epel-releasesudo yum install pam_yubico
2. Open /etc/passwd and add to the end of it
<username>:<YubiKey token ID>
where username is the name of user who is going to authorize with YubiKey, and YubiKey token ID is a user’s YubiKey token identification, e.g.:
pam_user:cccccchvjdse
If you have several Yubikey tokens for one user, add Yubikey token ID of other devices separated with :, e.g. with 3 Yubikey tokens:
pam_user:cccccchvjdse:cccccchvtbdr:ccccccundggr
3. Create a mapping file, e.g. /var/yubico_passwd
The file should contain a single record:
<user name>:<YubiKey token ID>
If you have several Yubikey tokens for one user, add Yubikey token ID of other devices separated with :, e.g. with 3 Yubikey tokens:
pam_user:cccccchvjdse:cccccchvtbdr:ccccccundggr
4. Open /etc/pam.d/sshd and add to the very beginning
auth required pam_yubico.so id=CLIENT_ID debug authfile=pathToMappingFile
You can get the CLIENT_ID parameter value at https://upgrade.yubico.com/getapikey; pathToMappingFile is the path to the mapping file (/var/yubico_passwd)
5. Open /etc/ssh/sshd_config and set the following parameters:
PubkeyAuthentication noHostbasedAuthentication noPermitEmptyPasswords noChallengeResponseAuthentication yesPasswordAuthentication noUsePAM yes
6. Then restart the server with the ssh command:
sudo service ssh restart
Now, the user will be asked for the YubiKey code when authorizing.
iPhone 7 or later,
iOS 11 or later,
NFC supported devices
👉Lightning & USB support is on the roadmap.
NFC/USB supported devices
Android version 5 and above
Works via USB.
YubiKey is used as an additional keyboard.
Set up a host for connecting to the YubiKey server.
Connect. You will be asked for a YubiKey code.
Tap Use a YubiKey. You'll be asked to take YubiKey closer to the NFC module.
Take the YubiKey closer to the NFC module to transmit the code. The code will be received from the YubiKey by the NFC, after which Termius will connect to the server.
Set up a host for connecting to the YubiKey server.
Connect. You will be asked for a YubiKey code.
Take the YubiKey closer to the NFC module to transmit the code (for which you need Android 5 or later). The code will be received from the YubiKey by the NFC, after which Termius will connect to the server.
If YubiKey or your smartphone does not support NFC, you can use USB. Connect the YubiKey to the smartphone and press the button on the YubiKey. The YubiKey code will appear in the input field.
Set up a host for connecting to the YubiKey server.
Connect. You will be asked for a YubiKey code.
Connect the YubiKey to the computer and press the button on the YubiKey. The YubiKey code will appear in the input field, after which Termius will connect to the server.
