To use YubiKeys on a Linux system, you will need to install the appropriate Yubico software:

  • Yubico authenticator;
  • YubiKey Manager;
  • Built-in repositories;
  • Yubico PPA packages;
  • Compilation from the source code.

Installing the Yubico Authenticator


There are several ways to install a Yubico authenticator:

  1. Choose the distribution that best suits your version of Linux from the page here.
  2. Download AppImage, on this site you will find instructions on how to use it. Before running the program, make sure you have the pcscd package installed. To check if it is installed, type the command in the terminal: systemctl status pcscd. And to check if it’s on: systemctl is-enabled pcscd. To enable and run the package, type: sudo systemctl enable --now pcscd.
  3. Install the authenticator through the distribution’s repository if your Linux version allows it. Since the options may differ from OS to OS, you will need to refer to the documentation that came with the respective version to perform this step. Or you can try to find it on the Internet.

Installing the YubiKey Manager


You can download YubiKey Manager via AppImage at this link. Just like in the previous case, the AppImages program will work with the pcscd package installed.

You can also try to install the Manager through the repository by referring to the documentation of your distribution.

Install software using built-in repositories


If you have built-in distribution repositories, we recommend using them. The settings will depend on your OS. For example, for the Fedora version, to install the Yubico PAM module, you will need to enter a command: sudo dnf install pam_yubico

Using Yubico PPA packages


If your distribution repository does not contain Yubico packages, you can download Yubico PPA. To add a repository to your local directory, follow these steps:

  1. Open a terminal and run the command: sudo add-apt-repository ppa:yubico/stable && sudo apt-get update.
  2. When the package is finished downloading, press Enter, to confirm that the PPA has been added to your server.
  3. If you see that sudo add-apt-repository ppa:yubico/stable cannot get the signing key, try adding it manually with the command: sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 32CBA1A9.

After successfully completing all the steps, you can install the latest version of the software using the command in the terminal: apt install.

Below are common commands for installation (which may differ slightly depending on the OS).

 

Program Сommand
YubiKey Manager sudo apt install yubikey-manager
Yubico package sudo apt install libpam-yubico
U2F package sudo apt install libpam-u2f

 

Compiling using the source code

This method is designed for those with relevant development and programming experience. To install the Yubico software on Linux by compiling source code snippets, you will need the Yubico software source code, which can be found at GitHub. If you don’t have the relevant experience, we recommend using the other methods described above.

If you’re interested in setting up a YubiKey on Linux, please refer to our Knowledge Base for instructions.

Similar materials in the Knowledge Base

OTP passwords on YubiKey — how it works

OTP passwords on YubiKey — how it works

OTP passwords are one-time passwords (the origin of OTP is from English one time password) that are used for one authentication session. Their effect is usually limited by time. You may have received such codes by phone or mail when trying to access online banking or...