{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1035","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1035/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1035/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1035/events","html_url":"https://github.com/freedomofpress/securedrop/issues/1035","id":82857370,"number":1035,"title":"Could not config yubikey on Tails","user":{"login":"dolanjs","id":1495205,"avatar_url":"https://avatars.githubusercontent.com/u/1495205?v=3","gravatar_id":"","url":"https://api.github.com/users/dolanjs","html_url":"https://github.com/dolanjs","followers_url":"https://api.github.com/users/dolanjs/followers","following_url":"https://api.github.com/users/dolanjs/following{/other_user}","gists_url":"https://api.github.com/users/dolanjs/gists{/gist_id}","starred_url":"https://api.github.com/users/dolanjs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dolanjs/subscriptions","organizations_url":"https://api.github.com/users/dolanjs/orgs","repos_url":"https://api.github.com/users/dolanjs/repos","events_url":"https://api.github.com/users/dolanjs/events{/privacy}","received_events_url":"https://api.github.com/users/dolanjs/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/freedomofpress/securedrop/labels/docs","name":"docs","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-05-30T16:44:18Z","updated_at":"2015-09-21T10:26:11Z","closed_at":null,"body":"I was not able to get the yubikey-personalization-gui package to configure a yubikey on Tails. It kept saying firmware is not supported. This was a new replacement yubikey not the one with the vuln from a month or to ago.\r\n\r\nTo reproduce:\r\n\r\n1) Boot tails\r\n2) `sudo apt-get update`\r\n3) `sudo apt-get install yubikey-personalization-gui`\r\n4a) `yubikey-personalization-gui`\r\n4b) also tried running the configuration with sudo but same result\r\n5) Insert yubikey\r\n\r\nAnd it will say in the top left corner of the gui that the Firmware is not supported. Also tried it on different my hardware/tails and the someone else's different hardware/tails.\r\n\r\nI had to boot to their regular OS and configure the yubikey there. Once the yubikey is configured it works fine on tails just was not able to do the initial configuration of it in tails"},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/141934598","html_url":"https://github.com/freedomofpress/securedrop/issues/1035#issuecomment-141934598","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1035","id":141934598,"user":{"login":"flamsmark","id":639937,"avatar_url":"https://avatars.githubusercontent.com/u/639937?v=3","gravatar_id":"","url":"https://api.github.com/users/flamsmark","html_url":"https://github.com/flamsmark","followers_url":"https://api.github.com/users/flamsmark/followers","following_url":"https://api.github.com/users/flamsmark/following{/other_user}","gists_url":"https://api.github.com/users/flamsmark/gists{/gist_id}","starred_url":"https://api.github.com/users/flamsmark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/flamsmark/subscriptions","organizations_url":"https://api.github.com/users/flamsmark/orgs","repos_url":"https://api.github.com/users/flamsmark/repos","events_url":"https://api.github.com/users/flamsmark/events{/privacy}","received_events_url":"https://api.github.com/users/flamsmark/received_events","type":"User","site_admin":false},"created_at":"2015-09-21T10:26:11Z","updated_at":"2015-09-21T10:26:11Z","body":"It's necessary to run the GUI as root, but the GUI doesn't do that by default. This feels like an upstream bug, though the fix is probably not in running the GUI as root but in changing some underlying permissions issue. Fixing this in a (backported?) package would be great because it'd remove any re-twiddling responsibilities from individual admins.\r\n\r\nIt is not necessary to set up UDEV rules unless using U2F. Related: U2F is so much better than HOTP and that should be the default 2FA option. That's a separate issue, though."}}