Results 1 to 8 of 8

Thread: Yubico FIDO U2F security key

  1. #1

    Default Yubico FIDO U2F security key

    opensuse 42.2
    linux 4.4.36-8-default x86_64

    Does the FIDO U2F security key work with Firefox?

    The Yubico site had a special udev rule to add to the system. Now the key is accessible with Chrome, but not Firefox. Is there something further to do? Or just SOL for now?

  2. #2
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    11,293
    Blog Entries
    2

    Default Re: Yubico FIDO U2F security key

    This is something only Yubico can answer for sure...

    I suspect that a udev rule only enables hardware detection... which may or may not be necessary.
    I'm pretty sure you need the Firefox plug-in to provide UDF integration and support,
    https://addons.mozilla.org/en-Gb/fir...upport-add-on/

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  3. #3

    Default Re: Yubico FIDO U2F security key

    Quote Originally Posted by tsu2 View Post
    I suspect that a udev rule only enables hardware detection... which may or may not be necessary.
    I'm fairly certain the udev rule was necessary. Chrome did not see the key until the rule was in place.

    Quote Originally Posted by tsu2 View Post
    I'm pretty sure you need the Firefox plug-in to provide UDF integration and support,
    Thank you, that was the missing piece.

    Sometimes it is hard to decide where the best place is to find assistance. In this case Yubico seemed a good start, but then this is linux which tends to be ignored, and the Firefox groups are often MS- and Apple-centric.

  4. #4
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    11,293
    Blog Entries
    2

    Default Re: Yubico FIDO U2F security key

    Quote Originally Posted by jimoe666 View Post
    I'm fairly certain the udev rule was necessary. Chrome did not see the key until the rule was in place.


    Thank you, that was the missing piece.

    Sometimes it is hard to decide where the best place is to find assistance. In this case Yubico seemed a good start, but then this is linux which tends to be ignored, and the Firefox groups are often MS- and Apple-centric.
    Regarding the udev rule, in one way it's not surprising because devices need to be recognized correctly to function, but I wonder how unique a security dongle really is... I'd think that there should be a general "device class" which Yubico would considered a part of... on the other hand, if there is something Yubico is that is extremely uniquely special I'm not aware of then it can be a piece of hardware that "stands alone."

    And then if Yubico really is something so unique maybe the hardware definition should be submitted for inclusion into the mainline kernel.

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  5. #5
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,063

    Default Re: Yubico FIDO U2F security key

    On Wed, 04 Jan 2017 06:16:02 +0000, jimoe666 wrote:

    > opensuse 42.2 linux 4.4.36-8-default x86_64
    >
    > Does the FIDO U2F security key work with Firefox?
    >
    > The Yubico site had a special udev rule to add to the system. Now the
    > key is accessible with Chrome, but not Firefox. Is there something
    > further to do? Or just SOL for now?


    Which specific key are you using? I've got a couple of different ones -
    I use them with Chrome, but haven't tried with FF on 42.1 here.

    Jim
    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  6. #6
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,063

    Default Re: Yubico FIDO U2F security key

    On Wed, 04 Jan 2017 18:56:01 +0000, tsu2 wrote:

    > jimoe666;2806973 Wrote:
    >> I'm fairly certain the udev rule was necessary. Chrome did not see the
    >> key until the rule was in place.
    >>
    >>
    >> Thank you, that was the missing piece.
    >>
    >> Sometimes it is hard to decide where the best place is to find
    >> assistance. In this case Yubico seemed a good start, but then this is
    >> linux which tends to be ignored, and the Firefox groups are often MS-
    >> and Apple-centric.

    >
    > Regarding the udev rule, in one way it's not surprising because devices
    > need to be recognized correctly to function, but I wonder how unique a
    > security dongle really is... I'd think that there should be a general
    > "device class" which Yubico would considered a part of... on the other
    > hand, if there is something Yubico is that is extremely uniquely special
    > I'm not aware of then it can be a piece of hardware that "stands alone."
    >
    > And then if Yubico really is something so unique maybe the hardware
    > definition should be submitted for inclusion into the mainline kernel.


    As I recall, I didn't need to set up a udev rule initially when I set up
    my Yubikeys - they were just plug-and-play IIRC.

    Jim



    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  7. #7

    Default Re: Yubico FIDO U2F security key

    Quote Originally Posted by hendersj View Post
    Which specific key are you using?
    Yubico FIDO U2F security key.

  8. #8
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,063

    Default Re: Yubico FIDO U2F security key

    On Thu, 05 Jan 2017 01:06:01 +0000, jimoe666 wrote:

    > hendersj;2806983 Wrote:
    >> Which specific key are you using?

    > Yubico FIDO U2F security key.


    Ah, OK - that must be a new one. I'm using the Yubico NEO key, which has
    U2F capabilities. I've also got a couple of the older Yubikey 4 devices
    that I play around with.

    Jim
    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •