Skip to content

Design: Hardware keys provisioning on desktop client #431

@teon

Description

@teon

User will have the possibility to provision a Hardware Key directly in the desktop client. We need dedicated screens/design for this:

  1. Initial screen

On this screen we will inform the user:

You have the possibility to provision (generate private/public key pars securely) for your hardware key and store public information in your defguard profile.

Supported devices are:
- Yubico Yubikey 5 family (NFC/c/...)
- Yubico Yubikey 4 family

Please remember the **key needs to be blank/new** if it's already provisioned with data this process will fail.

If you wish to continue, please click "Continue", otherwise please "Skip".
  1. Detection screen

After clicking Continue we need to detect if the HW key. We need a progress/carousel and:

  • after detecting a message:
Hardware key detected:
Manufacture: Yubico YK....
Model: XYZ
Serial number: XYZ
Firmware: XZY

[Provision] [Cancel]

  • if not detected for some time:
No key has been detected. Have you inserted the key into USB?

[RETRY] <- button [Cancel]
  1. PIN configuration

Before your XYZ key (serial: XYZ) will be provisioned, please set up a PIN that will be used for protection and accessing your private data on the hardware key.

Please remember, that you will not be able to use the key without this PIN.

PIN (1-6 digits):

Confirm PIN (1-6 digits):

[Next] [Cancel]

  1. Summary

We are ready to provision your XYZ key (serial: XYZ). This operation will take approximately XZY minutes.
Please do not remove the device during this process.

[Confirm] [Cancel]

  1. Provisioning
  • Generating RSA key par ...... [ progress bar ]....✔️
  • Generating openPGP/GPG key par ...... [ progress bar ]....✔️
  • Sending data to defguard ...... [ progress bar ]....✔️

Success icon!

[DONE]

Metadata

Metadata

Assignees

Type

No type

Projects

Status

Refinement ready

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions