Hi, I want to connect my yubikey directly to dom0 to add FIDO unlocking functions to my LUKS volume. Is this possible? Can a yubikey be used to unlock the LUKS drive at boot time on QubesOS? I used systemd-cryptenroll back when I was using Fedora Workstation.

How to attach Yubikey to Dom0?

configuration, dom0

KitsuneNoBaka December 7, 2025, 5:46pm 2

LUKS with Yubikey 2FA (chal-resp) on Qubes 4.2.0 Community Guides

Using a YubiKey can help protect your system from an attack that knows your LUKS password. The YubiKey Challenge-Response authentication doesn’t use a time component, if the attacker has access to both the key and your password they will be able to extract the permanent LUKS password. Make sure you have a full backup of your system before you try to modify your LUKS authentication, if you mess something up, there might be no way to recover without a backup. I will be using Debian 12, the yubik…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled