...
- YubiKey 4 or newer (Blue security keys and GitHub-branded security keys will not work)
- Latest version of OS
- YubiKey Manager
- Download direct from Yubico: https://www.yubico.com/support/download/yubikey-manager/#h-downloads
- Windows
https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest-win64.exe
Expand title SCCM Software Center
- Mac
- Linux
...
- Initialize/Configure YubiKey
- Determine which certificate to use
- Submit certificate for verification
- Configure clients to use certificates
- (RECOMMENDED) Next steps
1. Initialize/Configure YubiKey
...
Linux: YubiKey Linux SSH Client Configuration
5.
...
Next steps
YubiKey Duo Setup - start.rit.edu/Duo
...
- Sign and encrypt emails
- Main benefit comes from a chained certificate
- Trust follows the chain
- via Windows CA-issued certificate - valid for all RIT Windows domain-bound machines
- via publicly signed certificate - valid for everyone
- Trust follows the chain
- Using Your YubiKey for Email Signing/Encrypting with Outlook on Windows
- Using Your YubiKey for Email Signing/Encrypting with Outlook on Mac
- Main benefit comes from a chained certificate
- Signing Gitlab commits and tags
- Code signing
- Current Windows CA-issued certs are not able to sign code (as of 3/23/2022)Request a code signing certificate
- Code Signing with the YubiKey on Windows
...