Configuring PAM for use with Idem Key Plus
The following section describes how to configure the GoTrust Idem Key Plus Security Key for use as a second factor to authenticating to a privileged credential on the Tellaro Console by assigning a PIN to it. This is only required if you want to enforce PIN for Linux login.
On Linux and Mac
These steps were performed on a Linux (Rocky 9.1) 64-bit computer; however, it is conceivable that the steps will be identical on all Linux and Mac platforms.
Download and install Google Chrome browser.
If you have not already inserted the Idem Key Plus into a USB Type-A slot on your computer, you will be prompted to insert one.
Open up Chrome browser.
In the address bar, type in “chrome://settings/securityKeys” and hit Enter key.
You will see the following options:
If this is a new Security Key, click on the Create Pin option. If this key already has a pin set, click on the Reset your Security Key option to reset the Security Key to defaults before creating a new pin.
Follow the steps to save a new pin for the Security Key.
A successful message is shown.
On Windows
Following steps were performed on a Windows 10 64-bit computer:
Click on the Windows button at the bottom right or press the Windows key on your keyboard to open the start menu on Windows 10. Click on the cog wheel near the bottom left in order to open Windows settings.
In the Windows settings search bar, search “Security Key” and click on “Set up Security Key”.
You will be taken to the Sign-In options menu. Select “Security Key” and it will expand. Click on “Manage”.
If you have not already inserted the Idem Key Plus into a USB Type-A slot on your computer, you will be prompted to insert one. You will also be prompted to touch the Security Key.
After touching the Security Key, you will be presented with two options.
Choose the option to add a security PIN and follow the steps to create a Security Key PIN on the Security Key.If a security pin is already present on the Security Key, then instead of “Add” the box will say “Change”. In that case, changing the Security Key pin is option.