USB security key

A USB security key is a hardware stick for the USB port of a computer or smartphone. This stick contains the information about the created passkeys and can therefore be used relatively easily on different devices. We have successfully tested the following so far:

  • Yubikey 5 NFC, Yubikey Bio, Yubikey "Security key NFC" (blue)
  • Thetis PRO-C FIDO2

Presumably other hardware keys that support FIDO2 work similarly well. The setup is exemplary for a Yubikey in a Firefox browser under Linux.

Setting up Yubikey

After starting the setup, you must unlock your Yubikey with the PIN you have set. If you are using the Yubikey for the first time, you will be asked to set a PIN at this point. If you have a Yubikey Bio, you do not need to enter the PIN. The fingerprint is used instead.

Yubikey PIN bestätigen

Confirm your physical presence by touching the golden surface of the Yubikey.

Bestätigung der Präsenz durch Berührung des Yubikeys

Then allow the transmission of model data to the MFA server.

Datenübermittlung von Daten des Yubikey erlauben

To manage the passkeys stored on your Yubikey, you can use the Yubico Authenticator.