We use infrastructure secrets to encrypt sensitive data, deploy cloud instances, remotely log in and administer systems.
In order to add simplicity and security to infrastructure secret management we are testing the yubikey 4 nano.
NOTE: with the yubikey 4 nano I have noted that ykpersonalize -m1
(CCID mode only) does not seem to have an effect.. Look into this!!! it is annoying mis-firing OTP.