After inputting the pin for Card B, I'm prompted for my password to unlock "login" from the keychain. I lock my screen and decide to unlock the screen with Card B. I normally login with Card A and use it for all my system auths ( I could also use Card B if i wanted).
For this example, assume I have two yubikeys: A and B, both paired with my system. The interesting part is when I change my login smart card. I have File Vault enabled and upon a reboot, I was not only able to use my yubikey to unlock the encrypted disk and boot the system but it was the only way to since I'd required smart card for all auths on the system. And then required smart cards for ALL authentication per this article: I paired several yubikeys (so as to have a backup) as smart cards with my Mac Mini. I did want to call out something I've experienced when setting up Yubikeys as smart cards with Mac OS 11.6 Big Sur: Copy and Pasting my feedback to Yubico here as I can't find mention of this scenario anywhere in the Apple docs or elsewhere:
0 kommentar(er)
