How to setup YubiKey with ManageEngine Password Manager Pro

Authored by: Support.com Tech Pro Team

1. Introduction

How to setup YubiKey with ManageEngine Password Manager Pro

2. Set Up

Configuring and Enforcing Two-Factor Authentication using YubiKey

Configuring Two-Factor Authentication using YubiKey

1. Navigate to Admin >> Authentication >> Two-factor Authentication.

2. In the window that opens, select YubiKey and click Save.

2. Click Confirm to enable YubiKey two-factor authentication.

Enforcing YubiKey Two-Factor Authentication

1. Once you confirm YubiKey two-factor authentication in the previous step, a new window will prompt you to select the users for whom two-factor authentication should be enforced.
2. Select the required users from TFA Disabled tab, move them to TFA Enabled tab and save changes.

3. You can also select the users later by navigating to Users >> More Actions >> Two-factor Authentication.
4. In the pop-up window, select the users for whom you want to enforce YubiKey two-factor authentication and click Save.

Connecting to Password Manager Pro's web interface after YubiKey TFA is Enabled

While logging into Password Manager Pro, the users for whom two-factor authentication is enabled will have to authenticate twice successively. The first level of authentication will be through the usual authentication method i.e., through Password Manager Pro's local authentication or AD/LDAP authentication, whichever is enabled for the user.

1. Launch Password Manager Pro's web interface, enter the Username and Password (local authentication or AD/LDAP), and click Login.
2. Once the first level of authentication succeeds, Password Manager Pro will prompt you to enter your YubiKey one-time password.

1. Insert the YubiKey into the USB port of your laptop or computer.

1. Before generating a one-time password, you need to decide which slot of the YubiKey (slot 1 or slot 2) you're going to use for authentication throughout.
2. Slot 1: If you tap the YubiKey once, it generates a 44-character security key whose first 12 characters are unique to this slot. For every subsequent login through this slot, the first 12 characters remain the same and the rest of the 32 characters are randomized.
3. Slot 2: If you tap and hold the YubiKey for 2-5 seconds, it generates a 44-character security key whose first 12 characters are unique to this slot. For every subsequent login through this slot, the first 12 characters will remain the same and the rest of the 32 characters will be randomized.
4. Here's a sample output from a YubiKey where the button has been pressed three times.cccjgjgkhcbbirdrfdnlnghhfgrtnnlgedjlftrbdeut
5. cccjgjgkhcbbgefdkbbditfjrlniggevfhenublfnrev
6. cccjgjgkhcbbcvchfkfhiiuunbtnvgihdfiktncvlhck

By default, YubiKey generates slot 1 passcode for NFC configured mobile devices. You can set slot 2 passcode as default by changing the setting from slot 1 to slot 2 using the Yubikey Personalization tool. 

1. Password Manager Pro matches the 12-character key against your account in its database and verifies the same for the second level of authentication during future login attempts.
2. After submitting the YubiKey one-time password, click Register and Login.