Yubico Forum

Re: Yubikey NEO - Yubico authenticator

2016-02-18T22:06:30+01:00

Excellent, please add [solved] to the initial forum post subject

Statistics: Posted by ChrisHalos — Thu Feb 18, 2016 10:06 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-18T21:38:06+01:00

ChrisHalos wrote:

https://developers.yubico.com/libykneomgr/Releases/

1) Download the newest release version for OS X (now, that is libykneomgr-0.1.8-mac.zip)
2) Open Terminal
3) Type cd ./Downloads and press Return
4) Type cd ./libykneomgr-0.1.8-mac/bin and press Return [obviously edit this command if you have a different version of libykneomgr]
5) Type ./ykneomgr -S 00a4040008a000000527210101 -S 0004dead and press Return
6) Remove and re-insert the NEO or YubiKey 4
7) Launch the Yubico Authenticator app to confirm no credentials are present

There is no master YubiKey reset option. The OATH, PIV, and OpenPGP applets have to be reset independently, so resetting one won't affect the others. Likewise for U2F (which isn't possible to wipe or reset) and the two configuration slots (which have to be deleted with the YubiKey Personalization Tool).

Unbelievable.. it works!

I followed your steps and am able to add more than the previous "2 keys"!
Now I can migrate all my OATH codes to my Yubikey!

Thanks a million times, my question is solved!

Statistics: Posted by Makkura — Thu Feb 18, 2016 9:38 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-18T21:07:34+01:00

Statistics: Posted by ChrisHalos — Thu Feb 18, 2016 9:07 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-18T12:45:44+01:00

ChrisHalos wrote:

You can reset the OATH applet with either opensc-tool or ykneomgr:

https://developers.yubico.com/ykneo-oath/Reset.html

If that doesn't work, please create a support case at yubi.co/support. Make sure you include the YubiKey Serial Number and Order Number.

Where can I download and install these tools and are the commands on the linked page exactly what I need to copy and paste into my terminal or do I need to alter something to the command itself?

Also. Doesn't this reset my entire device? (and probably disables me from logging in on the forums again if I need my OTP)

Statistics: Posted by Makkura — Thu Feb 18, 2016 12:45 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-18T01:20:28+01:00

Statistics: Posted by ChrisHalos — Thu Feb 18, 2016 1:20 am

Re: Yubikey NEO - Yubico authenticator

2016-02-17T20:45:09+01:00

I've got another thought on this.
Could it be that I need to reset the key and update the firmware or something before custumizing it?

It all seems so weird. I hope I'll get out of this because I really love the product.

Statistics: Posted by Makkura — Wed Feb 17, 2016 8:45 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-17T19:18:32+01:00

ChrisHalos wrote:

I have no thoughts here. I have never seen such a small cap on a NEO or YK4 on Yubico Authenitcator for Android (and in the case of the Desktop version, only if "read from slot 1" pr "read from slot 2" are selected). Here is a random YubiKey NEO I have here. When I'm testing adding OATH credentials I just scan the one on this page over and over (and name each credential differently) - https://developers.yubico.com/yubioath-desktop/:

Can you try custom naming when you add a new credential? For example, when adding your Hotmail account, change the entry under Credential name to just "Hotmail", Gmail to "Gmail", etc.

So again I scan a QR code for facebook and tried naming it just "Facebook" or any other random name.
The Authenticator on my smartphone tells me that the credential is added and returns to the window with all my saved accounts.

This is what I see and it has absolutely not added my facebook entry.
https://www.dropbox.com/s/1h9p2gqlo0rdr ... 4.png?dl=0

Also my device (NEO) has the same description as mine so there shouldn't be any difference.

Statistics: Posted by Makkura — Wed Feb 17, 2016 7:18 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-17T18:57:21+01:00

Statistics: Posted by ChrisHalos — Wed Feb 17, 2016 6:57 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-17T17:40:17+01:00

Tom2 wrote:

Are you sure you have a YubiKey NEO or YubiKey 4?

Be aware that you could be writing the credentials on the 2 configuration set for the OTP side of the device, rather using the ykoath-applet?

what you want is to add the key via its base64 representation or via a qr code most likely.

1.PNG

Yes I have a NEO (has NFC / Wifi icon on top)

And I assume I can't write to those slots as long these options are turned off like in the screenshot here:
http://prntscr.com/a4hrd9

Also the 2 entry cap first occurred to me when I was using the android app so I assume I couldn't do anything wrong with something simple as that.

Statistics: Posted by Makkura — Wed Feb 17, 2016 5:40 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-17T13:54:39+01:00

Statistics: Posted by Tom2 — Wed Feb 17, 2016 1:54 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-17T12:34:45+01:00

ChrisHalos wrote:

On the YubiKey NEO and YubiKey 4, you can store around 30 OATH credentials using Yubico Authenticator. If you're adding using the desktop application, go into Settings and make sure "read from slot 1" and "read from slot 2" are not selected, otherwise it will attempt to store the credentials in one of the two configuration slots.

Alright, I also read that in the FAQ that normally it should be able to store 30 OATH keys.

The problem is, it doesn't! I tried this approach on both the desktop app and my phone with the yubico authenticator.

So I scan the QR code, trying to add some keys when the key didn't have any.
2 entries seem to work. But when I try to add a third one it passes the scan, tells me that it has added the credential and presents me back with the home window where there are still only 2 keys (and not the third one I've added)

If I remove one of the 2 keys I'm able to fill it back in. But the maximum amount is stuck on only 2.

Statistics: Posted by Makkura — Wed Feb 17, 2016 12:34 pm

Re: Yubikey NEO - Yubico authenticator

2016-02-17T01:14:42+01:00

Statistics: Posted by ChrisHalos — Wed Feb 17, 2016 1:14 am

Yubikey NEO - Yubico authenticator

2016-02-16T20:39:52+01:00

Hey guys

Could it be that I can't store more than 2 accounts on my yubikey with the android yubico authenticator?

I would ditch the google auth app completely if I could store all my credentials on my yubikey.

Any help is apreciated

Statistics: Posted by Makkura — Tue Feb 16, 2016 8:39 pm