Yubikey Code Signing over Remote Desktop Session

Question

Hello,

I have a YubiKey connected to my server (Windows Server 2019), where I usually sign my applications. Everything works perfectly fine if I sit physically at the keyboard. However, if I use my workstation (Windows 11) with a remote desktop to the server, it doesn't find my YubiKey. Does anyone know how to deal with this issue? Is this possible?

Also, is there a way to cache or enter username/pin (from the YubiKey) to the registry (or something else) so it stops asking for my pin code (so I can automate the process)

Thanks!

Answer 1

Hello,

First ensure the Remote Desktop Client is set to share Smart Cards.

If this approach fails, I suspect that Yubikey may not be supported when using RDP with Server 2019, but it is supported in Server 2022, as indicated in the thread: Using Yubikey inside RDP Session (Terminal Server) - Microsoft Q&A

We could also consider verifying this on Yubico forums:

https://www.yubico.com/support-services/

https://forum.yubico.com/

yubikey and rds - Microsoft Q&A

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

thank you @Anonymous but how do you mean with "First ensure the Remote Desktop Client is set to share Smart Cards." The Yubikey is connected on the Windows server 2019, I'm using a Windows 11 computer.