Confirming macOS Detects the YubiKey
Insert the YubiKey into your Mac and confirm the LED flashes. The first time you insert a YubiKey, the Keyboard Setup Assistant should open. When it does, simply close it (the Keyboard Setup Assistant). If it does not, you can use the Basic YubiKey Troubleshooting article to confirm your Mac is detecting the YubiKey.
Securing Your Mac with a YubiKey
Following are two methods available for securing your Mac login with a YubiKey. The key difference between these (PAM and PIV, respectively) is that PAM, while being more secure of the two options, is also much harder to set-up on your system.
- Yubico PAM Module - Can be set up to require the YubiKey at login. For setup instructions, see the macOS Logon Tool Configuration Guide.
- macOS Smart Card (PIV) - Requires macOS 10.13 (High Sierra) or newer and cannot require the YubiKey at login. For setup instructions, see Using Your YubiKey as a Smart Card in macOS.