What PIN is OrbStack asking for?

[brandonzylstra]

I'm being presented with the following message: "Orbstack wants to improve Docker socket compatibility."

What PIN is it asking for? I don't believe I set up any PIN when I installed OrbStack, and there's nothing in KeyChain Access, nor in my password manager.

When and where was this PIN defined, and how would I obtain it?

[kdrag0n]

OrbStack is (optionally) asking for admin authorization in order to symlink the Docker socket: https://docs.orbstack.dev/faq#admin

This normally asks for Touch ID or password authentication. I've never seen a PIN prompt before, but it looks like it could be a macOS oddity related to smart cards: https://discussions.apple.com/thread/254092777

Do you have admin access on this machine?

[brandonzylstra]

Yes, I have full rights to do anything on the machine.

[kdrag0n]

I think this means that your Mac is somehow setup up to use a Yubikey (or some other smartcard) for authentication: https://discussions.apple.com/thread/253751852?answerId=257031729022#257031729022

So you should try using your Yubikey PIN.

If you don't have a Yubikey, it could be a macOS bug. Maybe this will help: https://apple.stackexchange.com/a/438591

[brandonzylstra]

Thanks!

Do you mean the OTP that the Yubikey generates?

[kdrag0n]

The Yubikey itself can also have a PIN that you set up, likely for passwordless FIDO2 (WebAuthn) authentication. I think that's what Mac is asking for.