Unlocking LUKS with Yubikey on dracut or mkinitcpio on Arch Linux
Prerequisites Make sure you have LUKS2 A FIDO2 compatible security key like the Yubikey 5 Install libfido2 and dracut or mkinitcpio Adding A Security Key Check your security key is present sudo systemd-cryptenroll --fido2-device=list If the security key is detected, you should see the device info similar to the following: PATH MANUFACTURER PRODUCT /dev/hidraw4 Yubico YubiKey OTP+FIDO+CCID Actually adding the security key to LUKS sudo systemd-cryptenroll /dev/name --fido2-device=auto --fido2-with-client-pin=yes It’s going to ask for your PIN, after you entered the correct PIN, it’s going to ask you to tap the security key twice....