This guide explains how to configure a YubiKey (from Yubico) for Infomaniak accounts protected by two-factor authentication (or dual authentication / 2FA). This is one of the methods that allows you to secure access to your Infomaniak user account.

Introduction

• Currently, Infomaniak only supports the Yubico OTP (One-Time Password) protocol for YubiKey keys.

Configure OTP on your YubiKey

To generate one-time passwords (OTPs), you must first configure your key using the official Yubico utility:

1. Download and install the YubiKey Manager application from the official Yubico website.
2. Insert your YubiKey into the USB port of your computer and launch YubiKey Manager.
3. In the top menu, click on Applications and then select OTP.
4. Choose the slot you want to configure:
   • Short Touch (Slot 1) (short press) or Long Touch (Slot 2) (long press)
5. Click the Configure button.
6. Select Yubico OTP as the credential type and click Next.
7. On the Yubico OTP configuration screen:
   • Check the Use serial box to fill in the Public ID field.
   • Click Generate to create the Private ID and the Secret key.
8. Be sure to check the Upload box located in the bottom right corner of the window, then click Finish.

The utility will save your configuration on Yubico's servers (a browser window will open to confirm the operation).

In case of a problem

OTP configuration is done, but validation fails on Infomaniak

If you have already configured the OTP protocol on your YubiKey but the code is not recognized when logging in, this usually means that the configuration has not been synchronized with the Yubico cloud.

To resolve this issue, you have two options:

• Open the YubiKey Manager and repeat the tutorial above to regenerate a configuration, making sure to check the Upload box this time before clicking Finish.
• Alternatively, if you copied and saved your credentials (Public ID, Private ID, and Secret key) during your first configuration, you can upload them manually by going to the official Yubico OTP key upload page.

Save the backup codes

If you have just activated two-factor authentication, the application will automatically display your 10 personal backup codes.