... | @@ -81,6 +81,20 @@ instructions: |
... | @@ -81,6 +81,20 @@ instructions: |
|
|
|
|
|
### Setting up 2FA in GitLab
|
|
### Setting up 2FA in GitLab
|
|
|
|
|
|
|
|
1. In gitlab, select "Preferences" and then in the left-hand column, "Account"
|
|
|
|
2. In section "Register a WebAuthn Device" find the "Set Up a New Device" button
|
|
|
|
|
|
|
|
3. IF you are using yubikey-agent for ssh, you need to stop that temporarily (otherwise the setup fails)
|
|
|
|
systemctl --user stop yubikey-agent.service
|
|
|
|
|
|
|
|
4. Now click the "Set Up a New Device Button
|
|
|
|
5. Touch the Yubikey button to confirm
|
|
|
|
6. Give the device a reference name so you can identify it
|
|
|
|
|
|
|
|
7. IF necessary, restart the yubikey-agent.service
|
|
|
|
8. If you have not already done so, generate and save the 2FA backup codes.
|
|
|
|
9. Log out and log back in again, to verify the yubikey 2FA works.
|
|
|
|
|
|
TODO
|
|
TODO
|
|
|
|
|
|
## SSH authentication in FIDO2 mode
|
|
## SSH authentication in FIDO2 mode
|
... | | ... | |