Yubikey Code Signing over Remote Desktop Session

Question

Hello,

I have a YubiKey connected to my server (Windows Server 2019), where I usually sign my applications. Everything works perfectly fine if I sit physically at the keyboard. However, if I use my workstation (Windows 11) with a remote desktop to the server, it doesn't find my YubiKey. Does anyone know how to deal with this issue? Is this possible?

Also, is there a way to cache or enter username/pin (from the YubiKey) to the registry (or something else) so it stops asking for my pin code (so I can automate the process)

Thanks!

Answer 1

Hello,

First ensure the Remote Desktop Client is set to share Smart Cards.

If this approach fails, I suspect that Yubikey may not be supported when using RDP with Server 2019, but it is supported in Server 2022, as indicated in the thread: Using Yubikey inside RDP Session (Terminal Server) - Microsoft Q&A

We could also consider verifying this on Yubico forums:

https://www.yubico.com/support-services/

https://forum.yubico.com/

yubikey and rds - Microsoft Q&A

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

thank you @Karlie Weng but how do you mean with "First ensure the Remote Desktop Client is set to share Smart Cards." The Yubikey is connected on the Windows server 2019, I'm using a Windows 11 computer.