Launch Yubico Authenticator and ensure that your YubiKey device is connected and recognized.

Note: Keyra requires a YubiKey model that supports Challenge-Response authentication to perform its cryptographic operations. Not all YubiKey models support this feature.

Tested with: Yubikey 5 Series.

In Yubico Authenticator, navigate to Slots to access the Challenge-Response configuration.

Select an available, unconfigured slot and select  "Challenge-response" to set up the authentication.

Generate a new "Secret key" to complete the Challenge-Response configuration.

For additional security, enable "Require touch" to require physical interaction with the YubiKey during authentication.

Your YubiKey slot has been successfully configured for Challenge-Response authentication.

Open Keyra to add your newly configured YubiKey to the authentication chain of your preferred vault.

Launch YubiKey Manager and ensure that your YubiKey device is connected and recognized.

Note: Keyra requires a YubiKey model that supports Challenge-Response authentication to perform its cryptographic operations. Not all YubiKey models support this feature.

Tested with: Yubikey 5 Series.

In YubiKey Manager, navigate to Applications → OTP to access the Challenge-Response configuration.

Select an available, unconfigured slot and click "Configure" to set up Challenge-Response authentication.

Select "Challenge-response" as the credential type.

Generate a new "Secret key" to complete the Challenge-Response configuration.

For additional security, enable "Require touch" to require physical interaction with the YubiKey during authentication.

Your YubiKey slot has been successfully configured for Challenge-Response authentication.

Open Keyra to add your newly configured YubiKey to the authentication chain of your preferred vault.