JAMF Pro and Yubikeys

[Rob01]

Hi JamF Community Members,

We are required to use Yubikey's as a MFA option. Ideally we'd like to push this configuration through Jamf Pro. Can anybody point me in right the direct or provide a link to the relevant documentation?

[jcaleshire]

This is something I've been looking into as well, as my organization is looking to implement YubiKey as an MFA solution. I don't have the full solution built yet, but here's the documentation I've dug up so far:

Jamf Pro Overview doc: https://resources.jamf.com/documents/technical-papers/macos-smart-card-overview.pdf.

YubiKey macOS setup guide: https://support.yubico.com/hc/en-us/articles/360013790219-Getting-Started-with-the-YubiKey-on-macOS

[Eskobar]

@Rob01  & @jcaleshire  Any ideas how to help user having locked smartcard to unblock his smart card at login?

Context:  MacOs detects that smartcard is bloked but doesn't show puk prompt. Yubikey support hasn't provided a professional solution.

Workaround:

1) unlock the locked key using yubikey another manager on another computer/mac !!!!

2) Unscope MDM smartcard config if the mac is still networked !!!

=> I need business solution that enable user to quickly unlock his yubikey and login in.