On Tuesday, February 20, 2018 at 8:44:36 PM UTC+1, William Bormann wrote: > > oh, you make a good point. I indeed made an assumption that it was about > > lock-out by the "reading guides" line, and I somehow missed the line > > regarding Google and Facebook services. I must then have misunderstood, I > > apologize. > > > > I just tested the Yubi key I got laying around, it works in sys-usb, or > > whereever the controller is located, be it dom0 or another AppVM with a > > working USB controller. But it doesn't seem like either the qvm-usb (or its > > GUI counterpart in the menu-widget introduced in Qubes 4, works. At least > > it doesn't appear on my system. > > > > But it works wherever the USB controller is located, just not in the VM's > > that are virtually linked with qvm-USB and the GUI-widget counterpart. > > > > As such, one can probably estimate the Yubi key working, if one has a > > working USB controller to spare, and that USB controller can feasibly be > > passed directly to the AppVM. But it can be tricky to find hardware that > > allows passthrough, especially considering the drivers are often not made > > for it, as well as there aren't terribly many products with multiple > > controllers on them to pick between. On laptops, it's hard to know in > > advance how many controllers there are, as it's not a marketing > > information, nor something frequently found in product reviews, quite > > frustrating. But if determined, can probably get extra USB controllers to > > spare, but it might be on the expensive side if making a mistake, like > > buying a computer that only had one controller, or the extra controller > > can't be passed through. > > > > But if one has a system with extra USB controllers, and it works to pass an > > USB controller directly into the AppVM (test other USB applications work), > > then the Yubi key should naturally work too. > > > > Perhaps there are easier work-arounds, or maybe the qvm-usb/GUI-widget it > > works on other systems. > > This is exactly what I was hoping. I'm not planning to use it for luks or > Qubes user login, but as a second authentication factor when I log into Gmail > or (shudder) or decide to catch up on Facebook. > > It turns out I do have a spare controller. Time to bring up sys-usb.
Glad it worked out good in the end:) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b0a9b701-233d-4b35-bd93-72fa778f2280%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
