Can I log into System Manager using Yubikey certificate authentication?
Applies to
- ONTAP System Manager (OSM) - All versions
- ONTAP 9.0 - 9.11.1
- 3rd Party 2FA Authenticator tool Yubikey
Answer
Using certificate authentication for ONTAP System Manager is currently not supported.
Additional Information
- YubiKey authentication works with certificate authentication method only at this time with ONTAP version 9.12.1 and later..
- Additionally, it works with ONTAP SSH to CLI but not in OSM
Reference: NetApp Documentation: Enable multifactor authentication
Beginning with ONTAP 9.12.1, you can use Yubikey hardware authentication devices for SSH client MFA using the FIDO2 (Fast IDentity Online) or Personal Identity Verification (PIV) authentication standards.