How to attach Yubikey to Dom0?

[Rectangle]

Hi, I want to connect my yubikey directly to dom0 to add FIDO unlocking functions to my LUKS volume.

Is this possible? Can a yubikey be used to unlock the LUKS drive at boot time on QubesOS?

I used systemd-cryptenroll back when I was using Fedora Workstation.

[KitsuneNoBaka]

LUKS with Yubikey 2FA (chal-resp) on Qubes 4.2.0

Using a YubiKey can help protect your system from an attack that knows your LUKS password. The YubiKey Challenge-Response authentication doesn’t use a time component, if the attacker has access to both the key and your password they will be able to extract the permanent LUKS password. Make sure you have a full backup of your system before you try to modify your LUKS authentication, if you mess something up, there might be no way to recover without a backup. I will be using Debian 12, the yubik…

[Rectangle]

Thanks for the link, but that’s not what I was looking for.

I want my Yubikey as a second way to unlock LUKS on startup, not as 2FA.

See here: Use systemd-cryptenroll with FIDO U2F or TPM2 to decrypt your disk - Fedora Magazine

Under

Use systemd-cryptenroll with a FIDO U2F key