top of page

YubiOn MacLogin Standalone Support

FAQ

​Frequently Asked Questions (FAQ)

Q

Do I need a separate authentication server?

A

No separate authentication server is required.

YubiOn MacLogin Standalone verifies the YubiKey credentials within the software and then passes the password part on to the Mac's normal password checking process. YubiKey verification is completed within the software, so there is no need to prepare a new authentication server.

Q

Can I increase the number of YubiKeys used for login?

A

This is possible by renewing your license.

If additional YubiKeys are required, we will sell YubiKeys for YubiOn MacLogin Standalone again and issue license files that can be used with those YubiKeys. By loading a new license file into the configuration tool, you can increase the number of YubiKeys that can be used while keeping the settings you are already using.

Q

Please tell me how the authentication works

A

Normal Mac login involves verifying the ID and password, but with YubiOn MacLogin Standalone, before the Mac verification process, the YubiKey is verified using the YubiKey's challenge response function, and if there is no problem, it is normal. The system is designed to perform Mac authentication. Since it takes advantage of the existing Mac system and adds a second verification item, authentication device verification, there is no need to change existing settings, reducing the burden on customers during implementation.

Q

Authentication fails, what could be the reason?

A

Common causes of authentication failure are:

- Multiple YubiKeys are connected.

- YubiKey is not recognizing the device correctly due to poor contact with the USB port or USB hub of the device.

Q

Can it be used in conjunction with FileVault?

A

The standard behavior on Mac is to automatically log in to your user account when you unlock the disk when using FileValut. If you want to use YubiOn MacLogin when FileVault is on, please turn on the disable automatic login setting.

​If you do not disable automatic login, you may not be able to authenticate correctly.

If you disable automatic login, you will need to enter your password twice immediately after starting up your Mac, once to unencrypt FileVault and once to log in.

If you are using software version 1.2.1 or later, this setting is automatically turned on. If you are using software version 1.2.0 or earlier, execute the following command in a terminal to turn the setting on.

Turn on the disable automatic login setting
sudo defaults write /Library/Preferences/com.apple.loginwindow DisableFDEAutoLogin -bool YES

Turn off (delete) the automatic login disable setting
sudo defaults delete /Library/Preferences/com.apple.loginwindow DisableFDEAutoLogin

Q

Can I install the software even if I am using antivirus software?

A

If you are using antivirus software, it may restrict the operation of YubiOn. Please exclude the following files from your antivirus software before installing YubiOn.

- Target files
/Applications/DeviceLocker.app
/Applications/YubiOnStandalone.app
/Applications/YubiOnStandalone Uninstaller.app
/Library/LaunchDaemons/jp.co.sgk.yubion.standalone.helper.plist
/Library/LaunchDaemons/jp.co.sgk.yubion.standalone.log.delete.plist
/Library/LaunchAgents/jp.co.sgk.yubion.standalone.devicelocker.plist
/Library/PrivilegedHelperTools/YubiOnStandaloneService
/Users/Shared/Library/Application Support/YubiOnStandalone/Settings/*
/Users/Shared/Library/Application Support/YubiOnStandalone/conf/License.xml
/Users/Shared/Library/Application Support/YubiOnStandalone/conf/YubiOnStandaloneSetting.xml
/Users/Shared/Library/Application Support/YubiOnStandalone/conf/log4swift.plist
/Users/Shared/Library/Application Support/YubiOnStandalone/sh/YubiOnStandaloneLogDeleter.sh
/usr/local/lib/libykpers-1.1.dylib
/usr/local/lib/libyubikey.0.dylib
/usr/local/lib/libjson-c.2.dylib
/usr/local/lib/pam/pam_yubion_standalone.so

manual

​Manual

Setup manual

YubiOnMacLoginStandalone_Manual.pdf

(3.16MB)

Release notes

Release notes

Version 1.2.1 (released 2024-04-03)

- Added error countermeasures when using FileVault

Version 1.2.0 (released 2023-11-24)

- Compatible with SonomaOS

Version 1.1.1 (released 2023-06-14)

- Added error countermeasures when writing to the authentication file

Version 1.1.0 (released 2022-05-31)

- Compatible with MontereyOS

- Compatible with Apple Silicon devices

Version 1.0.0 (released 2021-08-27)

- Release version

bottom of page