Important

If you use or change to YubiKey authentication for the workspace Owner, all users added to the workspace afterward will be required to use YubiKey authentication as well.

Overview

Fireblocks requires a strong method of authentication for transaction signing and authorization. The Fireblocks mobile app uses a device’s biometric sensor for authentication by default.

For customers seeking an alternative authentication method, Fireblocks allows customers to use YubiKey.

This article describes the steps to setting up a YubiKey 5 NFC device for authentication on the Fireblocks mobile app. The procedure involves initializing the YubiKey device and sending a list of parameters to Fireblocks to associate the initialized device with a workspace user.

Setting up your YubiKey

Download and install the YubiKey personalization tool from the YubiKey website.
Open the YubiKey personalization tool app, then select the Yubico OTP tab.
Select Advanced.
Select Configuration Slot 1.
Select Generate next to Public Identity, Private Identity, and Secret Key.
Verify your YubiKey is inserted into the computer USB slot, then select Write Configuration.
Save as a CSV file.
Encrypt the CSV file using this PGP public key and attach it to your request form.

Encrypting the CSV file with a PGP key

Warning

It is important that you DO NOT send an unencrypted file. If you need assistance with encryption, please let us know or contact your internal IT security team for help.

Download gnupg by running one of the following commands on Mac or Linux:
brew install gnupg
or
sudo apt-get install gnupg
Import the downloaded PGP key using the following commands:
gpg --import armored-keys.asc
gpg --list-keys
Edit the trust value to ultimate:
gpg --edit-key "Fireblocks Support"
gpg> trust
Enter 5 and y to confirm.

(Exit the gpg editing window by typing quit and selecting Enter on your keyboard)
You can verify the trust value by running the gpg --list-keys command:
Run the gpg -e -r "Fireblocks Support" [filename].csv command to encrypt the .csv file that you received from the Yubico Personalization Tool.
Run the ls command to confirm a .gpg file is created.