(Solved) Re: yubikey verification on google (firefox)

Thanks to Dave Cottlehuber for pointing me to

https://docs.skunkwerks.at/s/X-BIuUPVV#freebsd-notes

I thought I had studied that already but not sufficiently (see below)

On 2/25/25 16:29, Gary Aitken wrote:
> I've had a yubikey for some time I've used successfully to authorize
> a google business account on a laptop running ubuntu.  On the
> laptop, firefox pointed at google prompts for the yubikey after
> entering id/pw, then verifies ok.
> 
> On my fbsd workstation firefox pointed at google prompts for the
> yubikey after id/pw, but I don't get any response.  The yubikey
> blinks but that's it.
> 
> I've got pkg_yubico installed, and user mounts on usb are allowed.
> 
> ykinfo -a displays the info fine.
> 
> I'm not necessarily interested in modifying the key on fbsd; only
> using it.
> 
> $ uname -a FreeBSD breakaway.dreamchaser.org 13.4-RELEASE-p3 FreeBSD
> 13.4-RELEASE-p3 GENERIC amd64

As I only wanted to *use* the yubikey, only the following was required:

pkg install pkg_yubico
pw group mod u2f -m <user>
pkg install u2f-devd
service devd restart
log out and back in to get user in group
   requires backing out of X and logging off/back in

Gary