#1107727 yubikey-luks: YUBIKEY_CHALLENGE password in ykluks.cfg has no effect

Package:
yubikey-luks
Source:
yubikey-luks
Submitter:
Mikolaj Menke
Date:
2025-06-13 03:35:02 UTC
Severity:
normal
#1107727#5
Date:
2025-06-13 03:14:45 UTC
From:
To:
Dear Maintainer,

- What led up to the situation?

1. Install yubikey-luks package.
2. Initialize your Yubikey and enroll it for usage with LUKS, e.g.:
        ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-
visible
        yubikey-luks-enroll
3. Edit /etc/yluks.cfg and enter the Yubikey password:
        YUBIKEY_CHALLENGE="enrolled-challenge-password"
4. Add the following option in /etc/crypttab:
        keyscript=/usr/share/yubikey-luks/ykluks-keyscript
5. Run update-initramfs -u


- What was the outcome of this action?

When booting the system with the Yubikey plugged in I am being asked to insert
Yubikey or enter a passphrase:
        "Please insert Yubikey and press enter or enter a valid passphrase"
Pressing enter returns:
        "Accessing yubikey...
        Retrieved the response from the Yubikey
        Nothing to read on input.
        cryptsetup: ERROR: nvme0n1p5_crypt: cryptsetup failed, bad password or
option?"
Then when I enter the password which was set for the Yubikey (the same I have
at YUBIKEY_CHALLENGE) the system starts booting normally.


- What outcome did you expect instead?

I expect the system to start booting without waiting or asking for a password
just with the Yubikey plugged in.