Recently, I received my long awaited Solo V2 Keys

Using Solo2 security key

Very good reference: https://blog.frehi.be/2022/08/04/using-the-solo-v2-fido2-security-key/ (Archive)

Updating

• Download cli tools from: https://github.com/solokeys/solo2-cli/releases
• (win) run: solo2-v0.2.0-x86_64-pc-windows-msvc.exe update

Setting PIN

• (win) open in Settings: Security Key / Manage
  • (optionally) reset
  • set PIN

SSH

Issues:

• IdentityFile did not work while -i did: https://www.reddit.com/r/yubikey/comments/wip57i/comment/ijcy92e/

References

Services that allow security keys

• https://www.dongleauth.com/
• https://hideez.com/pages/supported-services
• (2FA in general) https://2fa.directory/de/

Solo 2

• General
  • https://static.solokeys.com/en/start/let-s-start/
• V1
  • PIN: https://github.com/solokeys/solo1/issues/349
  • https://github.com/solokeys/solo1-cli
  • https://docs.solokeys.dev/
• V2
  • https://www.kickstarter.com/projects/conorpatrick/solo-v2-safety-net-against-phishing
  • https://github.com/solokeys/solo2
  • https://hackmd.io/@solokeys/solo2-getting-started
  • https://github.com/solokeys/fido-authenticator
  • https://app.element.io/#/room/#solokeys-dev:matrix.org

WebAuthn

• https://webauthn.io/

Applications

• Github

  • https://www.computerbase.de/forum/threads/github-login-mit-fido2-key.1919444/
  • https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/recovering-your-account-if-you-lose-your-2fa-credentials
  • https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/about-two-factor-authentication
  • SSH
    • https://github.com/github-community/community/discussions/10593

• GitLab

  • SSH
    • https://gitlab.com/gitlab-org/gitlab/-/issues/367682

• KeepassXC

  • https://github.com/keepassxreboot/keepassxc/issues/3560

• Passwordless login (linux)

  • https://docs.solokeys.dev/application-ideas/

• MS / Azure

  • https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/active-directory/authentication/howto-authentication-passwordless-security-key.md
  • https://www.petervanderwoude.nl/post/enable-password-less-sign-in-with-security-keys/

Alternative Hardware

• Nitrokey
  • https://shop.nitrokey.com/de_DE/shop/product/nkpr2-nitrokey-pro-2-3
  • https://support.nitrokey.com/t/pre-sales-antwort-einsatz-win10-keepass/2168/4
• Yubikey
  • https://www.yubico.com/authentication-standards/fido2/

Use Key in WSL (for ssh)

• Install usbipd (pre-release)
  • msi from: https://github.com/dorssel/usbipd-win/actions/runs/8581245579
  • pre-release because of issue https://github.com/dorssel/usbipd-win/issues/917
• Update WSL to pre-release
  • wsl --update --pre-release
  • pre-release because of issue https://github.com/microsoft/WSL/issues/8302
• Test
  • apt install fido2-tools usbutils
  • lsusb
  • FIDO_DEBUG=1 fido2-token -L

Refs

• https://github.com/dorssel/usbipd-win

Other/outdated ideas/refs:

• https://github.com/mgbowen/windows-fido-bridge (outdated)
• https://jardazivny.medium.com/the-ultimate-guide-to-yubikey-on-wsl2-part-2-1d9546ef23a6 (Archive)
• https://docs.nitrokey.com/software/nitropy/linux/udev (Archive)
• https://docs.solokeys.dev/udev/ (Archive)

FIDO

• https://www.robin-data.io/en/data-protection-academy/wiki/passwordless-authentication-over-fido2
• https://fidoalliance.org/fido2/