I am working on setting up a system with a YubiKey 4 in this way. Apple FDE can accept a certificate for verification. Or simply the password.

I haven't set up LUKS like this in a long, long time. But I will get there soon..