Files
systemd/man
Kamil Szczęk e262205eb7 cryptenroll: support for enrolling FIDO2 tokens in manual mode
systemd-cryptsetup supports a FIDO2 mode with manual parameters, where
the user provides all the information necessary for recreating the
secret, such as: credential ID, relaying party ID and the salt. This
feature works great for implementing 2FA schemes, where the salt file
is for example a secret unsealed from the TPM or some other source.
While the unlocking part is quite straightforward to set up, enrolling
such a keyslot - not so easy. There is no clearly documented
way on how to set this up and online resources are scarce on this topic
too. By implementing a straightforward way to enroll such a keyslot
directly from systemd-cryptenroll we streamline the enrollment process
and reduce chances for user error when doing such things manually.
2024-06-20 14:26:24 +02:00
..
2024-06-20 14:26:13 +09:00
2024-04-15 10:40:11 +02:00
2023-12-25 09:15:53 +01:00
2024-03-20 15:24:11 +01:00
…
2024-03-04 16:12:23 +04:00
…
2024-04-23 01:42:11 +09:00
2024-05-15 14:19:01 +02:00
2024-04-19 13:25:32 +01:00
2023-12-26 08:59:53 +01:00
2023-12-26 08:59:53 +01:00
2023-12-26 13:10:36 +01:00
2023-12-26 13:10:36 +01:00
2024-06-12 18:36:21 +09:00
2023-12-24 09:32:26 +01:00
2023-12-24 10:46:55 +01:00
2024-03-04 16:12:23 +04:00
2024-03-20 15:24:11 +01:00
2024-05-13 19:53:51 +09:00