Yubico Forum

FIDO - U2F • [Community] - Forum going read only. New KDB on its way.

2018-01-30T09:26:55+01:00

For the security and experience of our user community, we have decided to set the forum as read-only and wipe all user account information. All historical posts and announcements will be archived and remain publicly searchable.

In 2018, we will be publishing a searchable knowledge-base system that allows the community to provide direct feedback on articles and make suggestions that will be reviewed by Yubico staff. We sincerely appreciate the participation of our user forum over the years and hope to continue serving your for years to come.

Statistics: Posted by Tom2 — Tue Jan 30, 2018 9:26 am

FIDO - U2F • Re: Using 2 YubiKey 4 devices from two different PCs

2018-01-05T17:54:42+01:00

There is no way to answer this without knowing what type of account you're trying to protect.

Statistics: Posted by ChrisHalos — Fri Jan 05, 2018 5:54 pm

FIDO - U2F • Using 2 YubiKey 4 devices from two different PCs

2018-01-05T07:42:03+01:00

Hi.
One office PC and one home PC.

Don't want to carry the Yubikey 4 device I have.

Can I use 2 of these?

Thank you

Statistics: Posted by mckbsyegal — Fri Jan 05, 2018 7:42 am

FIDO - U2F • Re: Login Facebook with NFC do not work

2017-12-16T02:48:13+01:00

ChrisHalos wrote:

We implemented the transport hints starting in NEO firmware 3.4.6 (after the FIDO U2F v1.1 specification was released - before this, any device wouldn't implement this feature).
There are pros and cons to using transport hints on the service-side:

Pro:
* If the device was released after v1.1 of the spec was published (and the device vendor decided to implement this), the service can tell which transport protocols your device supports (USB, NFC, BLE). In this scenario, the service (Facebook in this case) knows the devices capabilities, and when attempting to log in from an Android device, the service knows if your device will work in that scenario. If the device doesn't support NFC, then Facebook won't ask for your U2F device - it'll ask for your backup method. It actually works great, for example, if you have a FIDO U2F Security Key or a YubiKey 4 (which don't support NFC) - it knows the device can't be used in that scenario and it falls back to the backup method.

Con:
* Transport hints, while it was added in v1.1 of the specification, it is not REQUIRED by the device manufacture. It is optional. So even now, a U2F device manufacturer doesn't have to include transport hints. Since Facebook uses transport hints to determine whether your device is capable of communicating over NFC, any device that doesn't implement this optional feature of the specification cannot be used over NFC.
*Any device manufactured before v1.1 of the specification was released obviously won't use transport hints, so it can't be used to log into a Facebook account over NFC.

In my opinion, the best way for the service to handle this is to:
(1) use transport hints to determine which communication protocol is supported by the device
(2) give users an option in their Security Key settings of their account to override this option, i.e. confirm that their device(s) supports NFC or BLE.

I understand. The topic is that I spent 60 Dollars in a security key and I can't use it to login facebook over NFC. Talk with Facebook is impossible, only users forums is available, and upgrade Yubikey firm is impossible. Incredible.

Statistics: Posted by MacGyver — Sat Dec 16, 2017 2:48 am

FIDO - U2F • Re: Login Facebook with NFC do not work

2017-12-16T00:48:50+01:00

Statistics: Posted by ChrisHalos — Sat Dec 16, 2017 12:48 am

FIDO - U2F • Re: Login Facebook with NFC do not work

2017-12-15T21:38:42+01:00

ChrisHalos wrote:

The only other thing I can tell you is to make sure you're logging in through Chrome. The Facebook app doesn't support U2F.

correction: Facebook only recognizes firmware 3.4.6 for mobile login (when transport hints were added to the U2F spec), so facebook essentially doesn't believe your key is capable of NFC. All I can suggest is to contact Facebook to request they don't restrict based on transport hints - https://www.yubico.com/support/knowledg ... k-android/

Hi,

Thanks for your reply. What is exactly should say to Facebook?

A hug.

Statistics: Posted by MacGyver — Fri Dec 15, 2017 9:38 pm

FIDO - U2F • Re: Login Facebook with NFC do not work

2017-12-15T20:29:29+01:00

Statistics: Posted by ChrisHalos — Fri Dec 15, 2017 8:29 pm

FIDO - U2F • Re: Login Facebook with NFC do not work

2017-12-15T07:11:36+01:00

Hi,

Thanks for fast reply. The firmware version is 3.4.3 and the yubikey is registered in my Facebook account. Google Authenticator is installed in your last version but still don't work. What can i do?

Thanks a lot.

Statistics: Posted by MacGyver — Fri Dec 15, 2017 7:11 am

FIDO - U2F • Re: Login Facebook with NFC do not work

2017-12-15T07:02:15+01:00

install Google Authenticator and try again

If that doesn't work, make sure your NEO is at least firmware 3.4.0 (any NEO purchased from mid-2015 on), and of course that the NEO is registered to your Facebook account.

Statistics: Posted by ChrisHalos — Fri Dec 15, 2017 7:02 am

FIDO - U2F • Login Facebook with NFC do not work

2017-12-15T03:27:02+01:00

Hi!

I try to login Facebook with mi Yubikey NEO trought NFC in my phone with Andorid and Chrome (in desktop view mode) but do not work. Chrome open a new tab and navigate to yubico site and show me this message "Authentication failed! Authentication was not successfull!" and I can't login on Facebook. How can I fix it?

Thanks a lot

A hug to all

Statistics: Posted by MacGyver — Fri Dec 15, 2017 3:27 am

FIDO - U2F • Re: Useable on LastPass

2017-12-08T03:28:10+01:00

"Eventually"

https://lastpass.com/support.php?cmd=showfaq&id=8126

Statistics: Posted by joomko — Fri Dec 08, 2017 3:28 am

FIDO - U2F • Re: U2F suddenly stopped working (W10 15063)

2017-09-29T05:58:36+01:00

Well since nobody else seems interested enough to respond, I will throw my idea out there. I have had some issues with the Yubikey acting strange or not working when I thought it should. My problem turned out that it was some program I had running like PIV manager or a gpg commandline editing the smartcard which was stopping functionality that I was expecting. Perhaps this could be the reason? close the programs, unplug the YK and plug back in.

Statistics: Posted by Morthawt — Fri Sep 29, 2017 5:58 am

FIDO - U2F • Which transformation of data is required to accomplish this?

2017-09-28T13:33:56+01:00

Im finally got my Yubico 4C nano in my mailbox.

Im currently toying around with U2F now, and wonder:

Is there any way, I can combine a string S, and a U2F public key, so it render the string E(S), and then send it to the yubikey for signing, which should result in the string S getting sent back?
Eg, I want to transform the challenge into something the U2F key can decrypt.
So I can simply check if initially generated random string S equals entered string, access is granted.

Statistics: Posted by sebastiannielsen — Thu Sep 28, 2017 1:33 pm

FIDO - U2F • Re: Yubikey 4 Suddenly Stopped Working Across Accts: OS X/Ch

2017-09-28T13:23:17+01:00

The lack of replies on this forum is astonishing. Did you ever get this resolved or figured out?

Statistics: Posted by techwg — Thu Sep 28, 2017 1:23 pm

FIDO - U2F • U2F suddenly stopped working (W10 15063)

2017-08-24T11:23:24+01:00

It seems like overnight after I rebooted my PC, I am unable to use U2F functionality on my PC.
Sometimes, the light will start blinking, sometimes not, but the response never reaches Chrome.

I tested on my Mac and it seems to work there, as well as Windows Hello with Yubikey works on the PC

Any suggestions?

Statistics: Posted by CraftByte — Thu Aug 24, 2017 11:23 am