The tool was already set up and IO needed the YubiKey to login, but, since this problem appear, I can use the Credential Provider during login without a YubiKey. But, suddenly, it does not work and gives the following error when I start it, for which I am attaching a screenshot. My YubiKey was set up and working with Yubico Login Tool for Windows. Yubico must make the Yubico Logon Tool for Windows available and working again, without making "discounts" on other advanced security measures! I let their Support Agent know about the information that I gathered and they assured me that they would forward it to the appropriate department. Yubico's suggestions to disable LSA Protection and Credential Guard are unacceptable. Moreover, if indeed Credential Guard poses a problem, too, Yubico needs to make the tool compatible with Credential Guard. It needs Hardware Compatibility Lab and/or Kernel-Mode Driver Signing. Yubico can very easily to that, just like they did for their Minidriver. Conclusion: Due to LSA (additional) Protection, the third-party module/Credential Provider needs to be signed by Microsoft.
0 Comments
Leave a Reply. |