...
- Insert YubiKey
Open a Terminal (Linux/Mac) or PowerShell (Windows).
Expand title Windows Windows: Run the following to adding the Yubikey Manager cli tools to environment PATH
Note Note: you must close and re-open your terminal for these to be picked up
Code Block #User Level $newPath = "$env:ProgramFiles\Yubico\Yubikey Manager;" + [Environment]::GetEnvironmentVariable("PATH", [EnvironmentVariableTarget]::User) [Environment]::SetEnvironmentVariable("PATH", $newPath, [EnvironmentVariableTarget]::User)
Run the following command to attest the certificate in slot 9a
Note Linux users will need to locate the AppImage and execute ykman command as argument
Code Block ykman piv keys attest 9a <path to save attested certificate> --- Example: (Windows) ykman piv keys attest 9a %USERPROFILE%\%USERNAME%-attest.pem (Linux) yubikey-manager-qt-***-linux.AppImage ykman piv keys attest 9a $HOME/$USER-attest.pem (Mac) /Applications/YubiKey\ Manager.app/Contents/MacOS/ykman piv keys attest 9a $HOME/$USER-attest.pem
Run the following to pull the intermediate certificate from slot f9
Note Linux users will need to locate the AppImage and execute ykman command as argument
Code Block ykman piv certificates export f9 <path to save attested certificate> --- Example: (Windows) ykman piv certificates export f9 %USERPROFILE%\yubico-intermediate-ca.pem (Linux) yubikey-manager-qt-***-linux.AppImage ykman piv certificates export f9 $HOME/yubico-intermediate-ca.pem (Mac) /Applications/YubiKey\ Manager.app/Contents/MacOS/ykman piv certificates export f9 $HOME/yubico-intermediate-ca.pem
Provide certificates to Systems or IA team member.
This step will require a face-to-face meeting or camera-enabled Zoom meeting.
This step is mainly required for access to Linux servers.Note This is still being tested, but we are using this for now.
Expand 3/18/2022 - (Used for testing only): Open in New Tab/Window: https://cpu.rit.edu/yubikey
Paste all the contents of the file, including the "BEGIN/END" statements
If submitting multiple certs, each certificate must be merged before new can be added (I believe this is true, needs verification)
Maybe This (TBD)Or maybe this? (BETA)