Update file yubikey.md

howto/yubikey.md

@@ -81,6 +81,20 @@ instructions:
 
 ### Setting up 2FA in GitLab
 
+1. In gitlab, select "Preferences" and then in the left-hand column, "Account"
+2. In section "Register a WebAuthn Device" find the "Set Up a New Device" button
+
+3. IF you are using yubikey-agent for ssh, you need to stop that temporarily (otherwise the setup fails)
+    systemctl --user stop yubikey-agent.service
+
+4. Now click the "Set Up a New Device Button
+5. Touch the Yubikey button to confirm
+6. Give the device a reference name so you can identify it
+
+7. IF necessary, restart the yubikey-agent.service
+8. If you have not already done so, generate and save the 2FA backup codes.
+9. Log out and log back in again, to verify the yubikey 2FA works.
+
 TODO
 
 ## SSH authentication in FIDO2 mode