Not sure this is the correct forum for this question at this point, you should be asking Yubico instead. There is a way to store SSH keys on your key, there might be a way to even host your own inhouse validation server (if not allowed, then only what is stored on the key will ever work). Either way, this is more of a Yubico question as to how to setup PAM and your key to work correctly.