Attestation
- Insert YubiKey
Open a Terminal (Linux/Mac) or PowerShell (Windows).
Run the following command to attest the certificate in slot 9a (You will need to rerun for other slots, like 9d)
Linux users will need to locate the AppImage and execute ykman command as argument
ykman piv keys attest 9a <path to save attested certificate> --- Example: (Windows) ykman piv keys attest 9a %USERPROFILE%\%USERNAME%-attest.pem (Linux) yubikey-manager-qt-***-linux.AppImage ykman piv keys attest 9a $HOME/$USER-attest.pem (Mac) /Applications/YubiKey\ Manager.app/Contents/MacOS/ykman piv keys attest 9a $HOME/$USER-attest.pem
Run the following to pull the intermediate certificate from slot f9
Linux users will need to locate the AppImage and execute ykman command as argument
ykman piv certificates export f9 <path to save attested certificate> --- Example: (Windows) ykman piv certificates export f9 %USERPROFILE%\yubico-intermediate-ca.pem (Linux) yubikey-manager-qt-***-linux.AppImage ykman piv certificates export f9 $HOME/yubico-intermediate-ca.pem (Mac) /Applications/YubiKey\ Manager.app/Contents/MacOS/ykman piv certificates export f9 $HOME/yubico-intermediate-ca.pem
Paste all the contents of the file (%USERNAME%-attest.pem), including the "BEGIN/END" statements, into the website below.
This is still being tested, but we are using this for now.
Open in New Tab/Window: https://cpu.rit.edu/yubikey
Please inform someone from Operations (Infrastructure Apps/Networks/Systems) that you've uploaded a certificate.
This step may require a face-to-face meeting or camera-enabled Zoom meeting.
This step is mainly required for access to Linux servers.