OpenVPN with yubikey

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
taniahagan
OpenVpn Newbie
Posts: 2
Joined: Thu Jul 21, 2022 11:15 am

OpenVPN with yubikey

Post by taniahagan » Thu Jul 21, 2022 11:20 am

Hi,

I have a new OpenVPN Access server version 2.11.0 working with a backend LDAP (FreeIPA) and OTP (Google Auth) and I'd like to configure the use of yubikey. The best instructions I've found is https://developers.yubico.com/yubico-pa ... a_PAM.html which mentions configuration files that no longer exist on my version.

Does any one have more up to date instructions that might work with this OpenVPN version? I've tried searching and checking cli tools help but nothing i've found gives me any hints.

Many Thanks,
Tania

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1333
Joined: Tue Feb 16, 2021 10:41 am

Re: OpenVPN with yubikey

Post by openvpn_inc » Thu Jul 21, 2022 12:13 pm

Hello Tania,

OpenVPN Access Server has LDAP and TOTP support built-in. Yubikey software can do TOTP. See here for documentation on how to use Yubikeys with authenticator codes;
https://support.yubico.com/hc/en-us/art ... ator-Codes

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

taniahagan
OpenVpn Newbie
Posts: 2
Joined: Thu Jul 21, 2022 11:15 am

Re: OpenVPN with yubikey

Post by taniahagan » Thu Jul 21, 2022 1:08 pm

Hi Johan,

Thank you so much for responding. So I set that up successfully, but you still have to copy the OTP digits to the OpenVPN connect software, is there anyway to just plug in the yubikey and use touch to add the OTP directly to the OpenVPN connect software?

Kind Regards,
Tania

Post Reply