Yubico Forum

Personalization tools • [Community] - Forum going read only. New KDB on its way.

2018-01-30T09:26:55+01:00

For the security and experience of our user community, we have decided to set the forum as read-only and wipe all user account information. All historical posts and announcements will be archived and remain publicly searchable.

In 2018, we will be publishing a searchable knowledge-base system that allows the community to provide direct feedback on articles and make suggestions that will be reviewed by Yubico staff. We sincerely appreciate the participation of our user forum over the years and hope to continue serving your for years to come.

Statistics: Posted by Tom2 — Tue Jan 30, 2018 9:26 am

Personalization tools • Re: [SOLVED]Unknown firmware

2018-01-18T17:45:43+01:00

Linux - the library needs to be updated (yubikey-personalization)

https://developers.yubico.com/yubikey-p ... ility.html

1.18.1 is required for 3.5.X NEOs and 4.4.X YubiKey 4s.

Statistics: Posted by ChrisHalos — Thu Jan 18, 2018 5:45 pm

Personalization tools • Re: [SOLVED]Unknown firmware

2018-01-17T21:43:49+01:00

If you read my post, I already installed and tested it with app version 3.1.25.

I just tried with version 3.1.26 from the master branch and the issue still exists.

Statistics: Posted by kus — Wed Jan 17, 2018 9:43 pm

Personalization tools • Re: [SOLVED]Unknown firmware

2018-01-16T22:35:07+01:00

Install 3.1.25, it'll fix the issue - https://developers.yubico.com/yubikey-p ... /Releases/

This page will be updated soon as well - https://www.yubico.com/support/knowledg ... ion-tools/

Statistics: Posted by ChrisHalos — Tue Jan 16, 2018 10:35 pm

Personalization tools • Re: [SOLVED]Unknown firmware

2018-01-15T22:49:18+01:00

Hey,

I have the same question, therefore I don't want to start a new thread.

Bought a Yubikey Neo. Got "unknown firmware" warning, too.

Tested with recent windows binaries (App Version 3.1.24, Lib Version 1.17.3) and with the latest version from github with Linux (App Version 3.1.25, Lib 1.18.0) - both showed "unknown firmware".

My key a yubikey neo with firmware version 3.5.

Any advices?
Thanks!

Statistics: Posted by kus — Mon Jan 15, 2018 10:49 pm

Personalization tools • [QUESTION] Copy/sync the OTPs from my NEO to NANO?

2017-12-12T17:04:36+01:00

Hi, I’ve got my Credentials stored in my NEO(Which is a USB-A)
I’ve also got a NANO (Which is a USB-C) plugged into my MacBook Pro.

This also means that I will need to bring my NEO and a USB adaptor everywhere I go so that I can retrieve my OTP from my MacBook Pro.

Is there a way for me to copy/sync the OTPs from my NEO to NANO? So that I will just need to leave my NANO plugged to my MacBook Pro. I don’t want to carry so many things with me, especially when I travel.

Statistics: Posted by nalawong — Tue Dec 12, 2017 5:04 pm

Personalization tools • YubiKey Certificate (PIV) Enrollment in non-AD environment

2017-09-22T17:14:32+01:00

Hi all,

I am looking to roll out a large number of YubiKeys in a heterogeneous (a lot of Mac and Linux Client) environment with certificates in PIV mode that is not centrally managed by an AD.
We are looking to deploy a open-source CA such as EJBCA for certificate handling and life-cycle.

We want to enable users to perform sort of a self-enrollment for the certifactes and make this as "simple" as possible to the user. While I understand all the necessary steps using the yubitools such as the pivtool. I am wondering if there is something comparable to the windows based enrollment tools such as the CSIS Enrollment station that works with open-source backends?

Any thoughts or input is greatly appreciated.
Thanks
lIl

Statistics: Posted by lil0r — Fri Sep 22, 2017 5:14 pm

Personalization tools • Re: [Q?] Does yubikey4 work with yubikey-personalization-gui

2017-07-19T14:54:35+01:00

Thank you for your help. It looks like it only works as root.

$ ykpersonalize -v
USB error: Access denied (insufficient permissions)

I looks like I need some udev rules to set up permissions. There are some udev rules for something at https://developers.yubico.com/yubikey-personalization/ but they don't seem to address permissions. Perhaps since it shows up as an HID device.

Perhaps this is by design.

Statistics: Posted by jklaas — Wed Jul 19, 2017 2:54 pm

Personalization tools • Re: [Q?] Does yubikey4 work with yubikey-personalization-gui

2017-07-18T17:10:02+01:00

The library version is too old - https://developers.yubico.com/yubikey-p ... ility.html

Linux Mint can use the Ubuntu PPA, so it's best to follow that method.

Code:

sudo add-apt-repository ppa:yubico/stable
sudo apt-get update
sudo apt-get install yubikey-personalization-gui

(I think instead of running the third command, since you already installed the app, you should be able to run "sudo apt-get upgrade" instead)

This will pull all dependencies and you should be able to use it with the YK4. At this point it's also a lot easier to install other Yubico apps like Yubico Authenticator. For example:

Code:

sudo apt-get install yubioath-desktop

You can find a full list of Ubuntu compiled apps here - https://launchpad.net/~yubico/+archive/ubuntu/stable

If you're planning on implementing any smart card functionality or U2F, make sure to also run the following command and reboot:

Code:

sudo sh -c 'wget -q -O - https://raw.githubusercontent.com/Yubico/yubikey-neo-manager/master/resources/linux-fix-ccid-udev | python'

Another example can be found here - viewtopic.php?f=26&t=2254#p8459

Statistics: Posted by ChrisHalos — Tue Jul 18, 2017 5:10 pm

Personalization tools • [Q?] Does yubikey4 work with yubikey-personalization-gui

2017-07-18T00:34:15+01:00

I just got a yubikey4 and while it produces a one time password with a touch, I was wondering what other capabilities it had so I installed yubikey-personalization-gui on my Mint 17 box.

I've also tried on Debian with the same result.

It says "No YubiKey Inserted"

It occurs to me that perhaps it isn't designed to work with yubikey4.

I apologize if I missed documentation somewhere stating this, but they key itself came with nothing, but the protective sleeve. The online manual is pretty terse as well.

The version installed says
Application version 3.1.14
Library Version 1.14.1

I've also tried with 3.1.24 on the Debian box.

Statistics: Posted by jklaas — Tue Jul 18, 2017 12:34 am

Personalization tools • [Question] yubioath-desktop on Fedora?

2017-07-10T19:18:48+01:00

(not sure if this is the right forum category, but it seemed the closest)

I was wondering if anyone uses yubioath-desktop on Fedora Linux.

Version 3.x worked correctly, however the rewritten 4.x version never detects a Yubikey. It compiles and runs successfully but it doesn't seem to notice the hardware. There's no error output, so I'm at a bit of a loss how to get to the bottom of it.

Statistics: Posted by balti — Mon Jul 10, 2017 7:18 pm

Personalization tools • yubikey-personalization-gui font size

2017-05-26T01:29:34+01:00

The font size on 4K displays makes it almost unusable, as it is ignoring the system settings is there any way to adjust the scaling?

Ubuntu 17.04, gnome-shell and wayland. Note the entire window is slightly less than 1.5 Neo's in height and the other text is 11 point.

Statistics: Posted by gdahlm — Fri May 26, 2017 1:29 am

Personalization tools • Re: [QUESTION] reset a configuration w. protection access co

2017-03-20T19:27:28+01:00

ChrisHalos wrote:

C:\Users\[user]

did the job Q! thanks thousand times....

Statistics: Posted by chris984784756 — Mon Mar 20, 2017 7:27 pm

Personalization tools • Re: [QUESTION] reset a configuration w. protection access co

2017-03-20T15:54:51+01:00

The default save location is not C:\Users\[user]\Documents, it's just C:\Users\[user]. This also assumes the logging option hasn't been turned off in the Personalization Tool (Settings > Log configuration output).

Statistics: Posted by ChrisHalos — Mon Mar 20, 2017 3:54 pm

Personalization tools • Re: [QUESTION] reset a configuration w. protection access co

2017-03-20T11:38:25+01:00

Before declaring the key toast, have the computer perform a search for the log file - it might have been dropped somewhere else.

Statistics: Posted by Sevo — Mon Mar 20, 2017 11:38 am