Yubico Forum

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-30T11:10:09+01:00

gmit wrote:

Why not put a simple GUI together that will report the state of the NEO, adjust it to work with Windows phones and solve the problem?

I explained the reasons earlier in the thread. Yubico have produced a standards compliant device. Microsoft have made assumptions in the Windows Phone 8 code that make it incompatible with Yubico's NFC implementation. The fault is Microsoft's - it's down to them to fix their faulty code.

If Yubico implement the kind of work-round you are asking for, this becomes a promise to support Windows Phone despite its lack of standards compliance. If Microsoft change their code and break something different in the future, this might leave all the affected Windows Phone users needing new Yubikeys, as you cannot update the firmware of a Neo in the field.

The work-round that Yubico published only works on developer Neos, not production devices. The random keying of the GlobalPlatform layer in production Neos, which is for sound security reasons, means there's no way for Yubico to distribute a GUI that activates the work-round on production Neos.

TL;DR - production variants of the Yubikey Neo, which is what you get if you buy today, are incompatible with Windows Phone 8. This due to defects in Microsoft's NFC code and affected users should complain to Microsoft. Anyone buying a Yubikey Neo specifically for Windows Phone 8 support should attempt to return the Neo to their supplier, though a refund might be rejected as the Neo conforms to the relevant standards.

Statistics: Posted by DavidW — Fri Jan 30, 2015 11:10 am

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-30T08:51:05+01:00

Thanks for the nice replies and efforts to help me!

I read in this post as well the following:

Quote:

As it stands at the moment, this is no longer possible if you have a production rather than a developer NEO with a serial number as follows:

2624253-2624449
2624801-2625499
3000000+

https://www.yubico.com/2014/07/yubikey-neo-updates/

Unfortunately in my case all I could do was return my production key for a refund with the hopes that Microsoft sort out their NFC stack in Windows 10 and/or I switch to another mobile platform, at which point I can happily think about updating my existing Yubikeys.

My key is 3000000+ therefore I did not even try the scripts, because probably my key is no longer a developer NEO it it wouldn't work, or can someone confirm that these scripts still work?

Statistics: Posted by rob — Fri Jan 30, 2015 8:51 am

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-30T02:40:08+01:00

I used the scripts. Are you following the steps correctly? what enviroment are you using?

Statistics: Posted by yjeanrenaud — Fri Jan 30, 2015 2:40 am

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-29T22:09:59+01:00

So what exactly did you do?

The scripts (dating back to 2012) have internal errors according to attempts that I have made to use them.

For a company that claims to specialize in leading edge technology this is sad. Why not put a simple GUI together that will report the state of the NEO, adjust it to work with Windows phones and solve the problem?

Statistics: Posted by gmit — Thu Jan 29, 2015 10:09 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-29T21:49:22+01:00

can't you configure your Neo as well to work with it? I did and it works with all Windows Phones I got that have NFC.

Statistics: Posted by yjeanrenaud — Thu Jan 29, 2015 9:49 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-29T20:59:56+01:00

Bought a yubico especially to use it with lastpass and windows phone 8 nokia 920. Paid 60 bucks and received today the yubico . But soon found out that it does not work on the phone. So it is completely useless to me, I'm so disappointed now.

You mentioned and applaud by others that is is spot on because it is not your fault that W8 is not implementing the exact standard. but for me as a customer and your client, I don't care whose fault it is, it is not working and therefore total waste of my money and can only tell my friends not buying this product.

Is there any chance on a refund, so at least I can tell my friends that you have a great customer service?

Statistics: Posted by rob — Thu Jan 29, 2015 8:59 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2015-01-27T13:40:04+01:00

Hey Guys,
So, with the latest YubiKey Neo, is it possible to use the NFC feature? I have the Lumia 1020 and wonder if it's still possible to use the OTP NFC feature...

Statistics: Posted by shanytc — Tue Jan 27, 2015 1:40 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-12-12T21:22:53+01:00

Just curious, but what did the APDU

Code:

80e2800007df3504a5034420

do, anyway?

Statistics: Posted by darco — Fri Dec 12, 2014 9:22 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-12-12T10:12:00+01:00

as far as I can see, yes. AND there's WP10 around the corner, so this might help in terms of compatibility as well

Statistics: Posted by yjeanrenaud — Fri Dec 12, 2014 10:12 am

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-12-12T03:57:53+01:00

SO if I understand this correctly, my old Yubikey Neo will work with Windows Phone 8.1 but the new Yubikey Neo that supports FIDO U2F will not work with Windows Phone?

Statistics: Posted by mgerbasio — Fri Dec 12, 2014 3:57 am

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-11-26T12:06:25+01:00

Right on spot David.

Statistics: Posted by Tom — Wed Nov 26, 2014 12:06 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-11-26T11:37:04+01:00

gmit wrote:

HELP! How is it possible for Yubico to not have a simple checkbox in the personalization tool to provide compatibility with Windows phones?

The universe of NFC users doesn't include many geeks that are willing to use command line hacks to fix compatibility problems. Blaming Microsoft is a childish response to this problem.

Hey, Yubico, put on your big boy pants, quit whining and make it work!

As a former software engineer, I regard Yubico's response as entirely understandable. There are standards for NFC and the Neo apparently complies with them. That being the case, your ire should be addressed to Microsoft, whose code that is broken in not behaving appropriately when faced with a standards compliant device that doesn't do what the Microsoft programmers assumed.

The work-round Yubico have made available for developer Neos requires a level of access that is inappropriate for users to have on a production standard security device. Yubico's move to random keying at the Global Platform level is an important measure to ensure the integrity of the applets on a Neo, to which you are entrusting security sensitive data.

If Yubico make the current Windows Phone 8 work-round a standard feature of production Neos, this becomes an implicit promise to support Windows Phone despite its lack of standards compliance. What happens if Microsoft subsequently change their code in a way that breaks the work round? Users will be expecting Yubico to update again which, in the worst possible scenario, will involve replacing their Neos.

Production Neos are sold "as is" with the firmware version current at the time of production. If you can show they fail to comply to the standards relevant to a feature, you have a case for replacement or refund as appropriate. However, Yubico cannot be responsible for a lack of compatibility with third party code that isn't compliant with the relevant standards. Compatibility issues are the fault of the party responsible for the defective code.

Statistics: Posted by DavidW — Wed Nov 26, 2014 11:37 am

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-11-25T20:27:46+01:00

Statistics: Posted by gmit — Tue Nov 25, 2014 8:27 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-11-25T18:54:59+01:00

As it stands at the moment, this is no longer possible if you have a production rather than a developer NEO with a serial number as follows:

2624253-2624449
2624801-2625499
3000000+

https://www.yubico.com/2014/07/yubikey-neo-updates/

Unfortunately in my case all I could do was return my production key for a refund with the hopes that Microsoft sort out their NFC stack in Windows 10 and/or I switch to another mobile platform, at which point I can happily think about updating my existing Yubikeys.

Statistics: Posted by timeames85 — Tue Nov 25, 2014 6:54 pm

Re: [SOLVED] Windows phone 8 and Yubikey Neo

2014-11-16T20:00:01+01:00

that's what you must do: viewtopic.php?f=26&t=1032&p=6233#p5463

Statistics: Posted by yjeanrenaud — Sun Nov 16, 2014 8:00 pm