Defguard provisioning client for Yubikeys module.
- Linux
- Windows
- MacOS
Machine using this service needs to have proper drivers/tools to detect and operate on smartcard's. While macOS and Windows should work without installing additional software, on Linux make sure your distribution has all the necessary tools to detect, read, and write on smartcard's.
Also, the following tools are required:
- ykman
- gpg version 2
The following information is required in order to launch client, these can be configured by supplying correct arguments or setting corresponding environment variables. For additional configuration options check --help.
| Name | Description | Environment variable | Argument |
|---|---|---|---|
| ID | Used to identify client, this is showed in main UI. | ID | --id |
| GRPC endpoint URL | This needs to point to active Defguard GRPC server. | GRPC_URL | --grpc |
| Authentication token | Token to authorize client, this can be found in provisioners page in main Defguard UI. | TOKEN | --token |
This tool can also be used from a docker image like so:
docker run --privileged ghcr.io/defguard/yubikey-provision:main -t <TOKEN> --id <ID> --grpc <DEFGUARD_GRPC_URL>Note that image is using elevated privileges to access host's USB by default but you can also try to configure it with --device.
git submodule init
git submodule update
brew install rust ykman gpg2 protobuf
cargo build
./target/debug/yubikey-provision --id <id> --token <token_from_defguard> --grpc "defguard-grpc.host.name"
See the documentation for more information.
Find us on Matrix: #defguard:teonite.com
Please review the Contributing guide for information on how to get started contributing to the project. You might also find our environment setup guide handy.