Desktop Client YubiKey provisioning
- Dominant language
- Rust
- Stars
- 369
- Forks
- 39
- Avg merge
- 21h 2m
- Merged PRs (30d)
- 32
Description
Our desktop client should be a YK provisioner during the enrollment process. The process should look like this:
1. During the enrollment process **on desktop client** there should be a stage named: Yubikey Hardware Security module setup. On the first screen there should be a picture of various YKeys and the following text:
```Yubikey hardware security module provides an extra security layer for: 2-factor authentication, secure VPN access with 2FA based you your hardware key, and store SSH and GPG/PGP private keys.
If you have a YK that you would like to provision (securely generate private keys based on your data), please plug it into USB.
Provide a PIN that will secure access to your private keys.
WARNING: if you will forget your pin you will not be able to access your private keys.
```
2. There should be progress in the process with the message:
```
Keys are generated and your public will be sent to defguard. If your administrator configured your servers/services to use SSH public keys stored in defguard you will be able to access those services with your private key.
[spinner]
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.