DefGuard / DefGuard/client

Desktop Client YubiKey provisioning

Open
#129 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
369
Forks
39
Avg merge
21h 2m
Merged PRs (30d)
32

Description

Our desktop client should be a YK provisioner during the enrollment process. The process should look like this:

1. During the enrollment process **on desktop client** there should be a stage named: Yubikey Hardware Security module setup. On the first screen there should be a picture of various YKeys and the following text:
```Yubikey hardware security module provides an extra security layer for: 2-factor authentication, secure VPN access with 2FA based you your hardware key, and store SSH and GPG/PGP private keys.

If you have a YK that you would like to provision (securely generate private keys based on your data), please plug it into USB.

Provide a PIN that will secure access to your private keys.
WARNING: if you will forget your pin you will not be able to access your private keys.
```

2. There should be progress in the process with the message:
```
Keys are generated and your public will be sent to defguard. If your administrator configured your servers/services to use SSH public keys stored in defguard you will be able to access those services with your private key.

[spinner]

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.