Yubikey LUKS with Qubes?

[cayce]

AFAIK if you are looking toward this for convenience/ease-of-use to avoid entering your pass phrase for LUKS with a single Yubi, IIRC it’s (currently) not possible.

Two-factor? OK!

Maybe this thread/reply is helpful to you:

Two YubiKeys for disc decryption

The setup mentioned in the guide you linked deos NOT offer drive decryption (which is done at boot), but merely two-factor authentication for user login once the drive has already been decrypted. If you want to use the yubikey to actually decrypt the drive, you’ll need something different, for example: Using a YubiKey as authentication for an encrypted disk | End Point Dev password - Yubikey Two-factor Authentication Full-disk Encryption via LUKS - Ask Ubuntu With this out of the way, the g…