Discussion about this fork and progress tracking

[uberlinuxguy]

This discussion is for anyone who finds their way here and wants to talk about my fork of this software. I will also be tracking my progress to a working version here. For anyone curious about my testing environment, here is a few brief details:

• Yubikey 5C NFC
• Windows 11 Pro
• Local Only Account
• No AD Domain access

Here is what I am currently working towards:
Tasks:

• test the code and see if it works.
• move to a build system that works better with VSCode
• Finish removing XP support.
• Clean up and work on better installer stuff

I will try to make comments on this thread as I go along testing.

[uberlinuxguy]

Initial test seems to work with my Yubikey. There may be some quarks, which as I come across them I will try to document them.

[uberlinuxguy]

msbuild seems to work ok if you have vscode setup to build for it and have the necessary SDKs and tools installed. I also added an msbuild workflow to the repo to build the NSIS installer when a release is published.

[uberlinuxguy]

Finished removing the XP compatibility stuff too. I think most of the tasks on this discussion are done.

[benjamindonnachie]

Windows 11 Education and Yubikey 5C NFC. Smartcard mini driver from Yubikey installed. Local account, no domain controller.

Use preconfigured card option fails to pick up the authentication key in slot 9a.

Tried 'configure new set of credentials' but it errors with 0x80090014 - invalid provider type.

Only slight niggle as it's unsigned, I needed to disable Local Security Authority protection.

[benjamindonnachie]

Exactly the same behaviour with a trial of the Enterprise edition. Turns out yubikeys are considered read-only by the Windows middleware and ECC certs aren't supported - only RSA.

[louieneuey]

Windows 11 Pro
Yubikey 5

I've compiled the installer in NSIS and now getting "Authentication package not available" when attempting to run EIDConfigurationWizard.exe.

[louieneuey]

Our issues were resolved by disabling Local Security Authority protection in Windows. This setting can be found in Settings > Privacy & Security > Windows Security > Device Security > Core isolation details > Turn off Local Security Authority protection.

[louieneuey]

I would like to add a couple of issues I noticed with the Installerx64.nsi script. The EIDConfigurationWizardElevated.exe is not copied into the INSTDIR so I copied it manually. Also, the command to create the desktop shortcut has a redundant file extension (exe.exe).

[uberlinuxguy]

Hi @louieneuey I have enabled issues on the repo, and if you have any suggestions for changes, feel free to open a PR as well.

[uberlinuxguy]

There definitely may be restrictions or other windows settings that need to be adjusted to get this to work. I only took a fork of the original code and wanted to make something functional-ish. I am 100% open to ideas for improvement and PR's