home lab smart card First, let’s define all of those terms above: 1. Mutual TLS is how we’re going to access the homelab. Mutual TLS is two-way TLS authentication: the client and server both have TLS certificates, and they authenticate each other mutually.In a “normal” (non-”mutual”) TLS connection, the server presents a TLS . See more LOAD_KEY. Load an authentication key in the SpringCore device. (either into .
0 · Smartcard authentication : r/homelab
1 · PKI/Smart Cards in Lab? : r/homelab
2 · Access your homelab from anywhere with a YubiKey and mutual
3 · A uni student's "overkill" network with smart
The ReadID Me app (previously known as NFC Passport Reader) reads and verifies the NFC chip embedded in your electronic passport and other ICAO compliant identity documents (ePassports, or in ICAO Doc 9303 terminology, .
First, let’s define all of those terms above: 1. Mutual TLS is how we’re going to access the homelab. Mutual TLS is two-way TLS authentication: the client and server both have TLS certificates, and they authenticate each other mutually.In a “normal” (non-”mutual”) TLS connection, the server presents a TLS . See morePIV is an application on the YubiKey that gives it smart card capabilities. Smart cards typically have a few slots where TLS/X.509 certificates and private keys can be secured. . See moreNow let’s set up our Caddy server. Here’s my /etc/caddy/Caddyfile, for my homelab server where I want to require mutual TLS: Some important points here: 1. Caddy will get and manage a Let’s Encrypt certificate for my homelab hostname, carl.lab.step.toys. By . See moreyubikey is a good choice, but if you're looking for a smart card form factor and a card that's .
Smartcard authentication : r/homelab
PKI/Smart Cards in Lab? : r/homelab
It's for the brand of card that I use, but really it'll work with most. You'd just have to map the .Smart cards are a fukkin DARK ART and require AD to authenticate, a Certificate Authority in .
By combining YubiKey’s smart card support with mutual TLS client certificates, hardware-bound private keys, and device attestation, you can expose your homelab to the internet in a way that carries very low security risk.
yubikey is a good choice, but if you're looking for a smart card form factor and a card that's easily setup, i'd suggest looking at the HID Crescendo C1150 -- https://www.hidglobal.com/products/cards-and-credentials/crescendo/c1150 with an .
It's for the brand of card that I use, but really it'll work with most. You'd just have to map the specs of the card that you use (you could use Gemalto cards too if you wanted too). Just make sure you map the OID for PIV 9A, which you'll see in the guide. Smart cards are a fukkin DARK ART and require AD to authenticate, a Certificate Authority in your Domain, and 3rd party software to manage the cards themselves (Load certs, reset pins, etc.) A home lab for virtualization allows you to play around with different operating systems, experimenting with virtual Firewalls, VPN servers, and Linux/Unix. It’s your own .
Build a portable NAS using external drives and Open Media Vault. You can even buy a fancy NAS enclosure for the Pi! Build a smart home with Home Assistant. With various accessories you can use it to make dumb things smart, or control already smart devices in your home, such as bulbs, cameras and TVs.
MyLab: Smart Card Authentication. October 30, 2023. I use a YubiKey 5 Series security key (from Yubico) in my lab. This allows me to use strong authentication and test out security scenarios that I usually find myself in while on the job.Dec 24, 2022. You can deploy any kind of tool in your smart home lab, but if you work on it during holidays, nights, post work hours, for sure, you will forget every time the way you choose. I’d love to try this in a test environment on my home lab, but it seems every solution is pretty expensive. Does anyone know if this solution can work with on the cheaper side, e.g. with unbranded smart cards, or is it not even worth considering? Home labs are perfect when you need an experimentation hub to deploy, test, and tinker with self-hosted services.
By combining YubiKey’s smart card support with mutual TLS client certificates, hardware-bound private keys, and device attestation, you can expose your homelab to the internet in a way that carries very low security risk. yubikey is a good choice, but if you're looking for a smart card form factor and a card that's easily setup, i'd suggest looking at the HID Crescendo C1150 -- https://www.hidglobal.com/products/cards-and-credentials/crescendo/c1150 with an . It's for the brand of card that I use, but really it'll work with most. You'd just have to map the specs of the card that you use (you could use Gemalto cards too if you wanted too). Just make sure you map the OID for PIV 9A, which you'll see in the guide.
Access your homelab from anywhere with a YubiKey and mutual
Smart cards are a fukkin DARK ART and require AD to authenticate, a Certificate Authority in your Domain, and 3rd party software to manage the cards themselves (Load certs, reset pins, etc.)
A home lab for virtualization allows you to play around with different operating systems, experimenting with virtual Firewalls, VPN servers, and Linux/Unix. It’s your own . Build a portable NAS using external drives and Open Media Vault. You can even buy a fancy NAS enclosure for the Pi! Build a smart home with Home Assistant. With various accessories you can use it to make dumb things smart, or control already smart devices in your home, such as bulbs, cameras and TVs.
MyLab: Smart Card Authentication. October 30, 2023. I use a YubiKey 5 Series security key (from Yubico) in my lab. This allows me to use strong authentication and test out security scenarios that I usually find myself in while on the job.
Dec 24, 2022. You can deploy any kind of tool in your smart home lab, but if you work on it during holidays, nights, post work hours, for sure, you will forget every time the way you choose. I’d love to try this in a test environment on my home lab, but it seems every solution is pretty expensive. Does anyone know if this solution can work with on the cheaper side, e.g. with unbranded smart cards, or is it not even worth considering?
If you see an NFC notification on your phone, you have two options: swipe it away or tap on it. Swiping it away will dismiss the notification and stop any action from happening. .
home lab smart card|Access your homelab from anywhere with a YubiKey and mutual