2

I'm trying to automate an authentication canary in a workflow that includes a mandatory Yubikey OTP (the 44-character unique password). Is there a way to configure a single Yubikey in such a way that I can generate the Yubikey long-touch OTP via script or API call without requiring touch?

Improve this question

1 Answer 1

Reset to default
3

Even if there were, you have effectively bypassed the one useful feature of the Yubikey: external verification is required for access to the TOTP token.

If you control the workflow then perhaps switch to another OTP mechanism where you can use the secret programmatically. Or remove OTP for a limited set of circumstances dictated by your threat model, e.g. for one user from one IP.

If you don’t control the workflow then consider hacking the Yubikey with an Arduino, a USB controlled switch or similar. The “button” is simply a capacitive sensor.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .