Double click on the new account in Yubico Authenticator, tap your YubiKey, and enter two consecutive MFA codes into the AWS console.Ensure you tick the box for Require Touch - this will help keep things secure. Enter AWS as the Issuer, your MFA ARN as the Account Name ( arn:aws:iam:::mfa/), and paste in the secret key.Go to Yubico Authenticator and Add Account.Click the hyperlink to Show Secret Key and copy it to your clipboard.Click on Assign MFA Device and then select Virtual MFA device.If you don’t have MFA enabled already, the button will read Assign MFA Device.

Scroll down the page to the Multi-factor authentication (MFA) section, and click Manage MFA Device, then Remove.

Onto the good stuff! Now that we have the YubiKey software installed, log in to AWS and go to Security Credentials.

For ease of managing our TOTP accounts, Yubico Authenticator is helpful.

aws-vault setup with an AWS account / IAM credentialsįirst up, you will need to install YubiKey Manager in Windows.

I’m assuming you have the following components ready: There is a solution!Īs we are able to call Windows binaries from within WSL, we can install the required software - YubiKey Manager - on Windows, and execute it from WSL. The only show stopper - WSL is unable to access the YubiKey which is plugged into the host OS, Windows.

Let’s use a YubiKey to enter the codes for you. So… you’re running aws-vault within Windows Subsystem for Linux (WSL) and you want to stop typing in MFA codes.

Yubico aws