Yubico Forum

Security Advisories • [Community] - Forum going read only. New KDB on its way.

2018-01-30T09:26:55+01:00

For the security and experience of our user community, we have decided to set the forum as read-only and wipe all user account information. All historical posts and announcements will be archived and remain publicly searchable.

In 2018, we will be publishing a searchable knowledge-base system that allows the community to provide direct feedback on articles and make suggestions that will be reviewed by Yubico staff. We sincerely appreciate the participation of our user forum over the years and hope to continue serving your for years to come.

Statistics: Posted by Tom2 — Tue Jan 30, 2018 9:26 am

Security Advisories • Infineon RSA Key Generation Issue

2017-10-16T13:15:51+01:00

For more information, please visit our dedicated customer portal (https://www.yubico.com/keycheck/).

Statistics: Posted by claydegruchy — Mon Oct 16, 2017 1:15 pm

Security Advisories • [HELP] - YubiKey not working in Windows (Multiple Version)

2015-10-08T08:23:19+01:00

We have 4 options here, try them in order

(1) Uninstall ALL entries in Device Manager for the NEO.

*If you have U2F enabled, you should see Human Interface Devices > HID-compliant device.
*If you have OTP enabled, you should see Keyboards > HID Keyboard Device.
*If you have CCID enabled, you should see Smart card readers > Microsoft Usbccid Smartcard Reader (WUDF), and Smart cards > Identity Device (NIST SP 800-73 [PIV]).

After all are removed, either "Scan new hardware" or remove the NEO and re-insert.

(2) Uninstall all entries under Universal Serial Bus controllers, and then restart. These will typically be reloaded when you restart.

(3) Use the Intel Driver Update Utility (assuming you are Intel-based), and restart after all drivers are updated. Alternatively, you can download the USB and Chipset drivers from your manufacturer's support website and install.

(4) On Windows 10 if on build 10.0.10240 updating to Windows 10 1511 build 10.0.10586 corrected the issue. You can simply open a cmd prompt and view the system build number at top.

(5) Re-install Windows.

WINDOWS 10
Win 10 - YK4.PNG

NEO
1.PNG

EDGE
2.PNG

Statistics: Posted by Tom2 — Thu Oct 08, 2015 8:23 am

Security Advisories • YubiKey NEO replacement policy regarding OpenPGP Card

2015-04-24T19:57:24+01:00

Yubico recently learned of a security issue with the OpenPGP Card applet project that is used in the YubiKey NEO. If you are using the OpenPGP applet version 1.0.10 or later with YubiKey NEO, this vulnerability does not apply to you.

The OpenPGP Card applet defect was inherited from the open-source software project "javacardopenpgp." The technical details are available in a security advisory posted on our website. This issue only affects the OpenPGP applet and does not impact the security of the YubiKey or its other functions.

While we continue to believe that the practical impact for the majority of users is not critical, Yubico aspires to exceed expectations related to security incident handling. Therefore, we have developed a policy on replacing affected YubiKey NEOs.

Note that moving usage of an OpenPGP key to a new YubiKey NEO requires that you have saved a backup copy of the private key on the card as there is no way to retrieve the private key from any YubiKey, including the YubiKey NEO. If you did not save a backup copy of the private key when you initially generated the key, you will need to revoke the existing key and create a new key. Therefore, we urge you to consider whether you are truly affected by the security issue before proceeding.

If you are using the YubiKey NEO with the OpenPGP Card applet and want to replace your YubiKey, go to yubi.co/support to log a support ticket. Include the output from 'gpg --card-status' on your YubiKey NEO (masking out personal information if you want) together with your order number in the ticket you submit. We will give you a coupon code so you can order a replacement YubiKey NEO with free shipping to you.

Statistics: Posted by David — Fri Apr 24, 2015 7:57 pm

Security Advisories • Do you have a QUESTION? Please READ THIS BEFORE POSTING!

2013-01-31T11:31:34+01:00

Hello,

If you want to ask for help in Yubico Tech Community please refer to these guidelines. This is to help you and all the other users to have a better experience and make the most out of this community.

If you want to post a question and need help

1) Your topic must contain the tag [QUESTION]. (i.e. your topic title must look like something like this: [QUESTION] - how do i configure the Yubikey for Windows logon?)
2) If you find the solution to your question, or some users helps you find a solution please EDIT your first topic and change the TOPIC TAG to [SOLVED] (i.e. [SOLVED] - how do i configure the Yubikey for Windows logon?)
3) Be patient and wait for support/community to provide an answer. For direct support on Yubico's products visit https://yubi.co/support

TOPIC LENGTH - If the TAG takes up too much space for your topic tile, please use the short tag [Q?] instead of [QUESTION] and [S!] instead of [SOLVED]

If you think you have found a bug

go on https://github.com/Yubico/ and open an issue in the appropriate repository!

If it is not about software available on GitHub, then:
1) Your topic must contain the tag " [BUG] " at the beginning of the title. (i.e. [BUG] - bug when i press the button X on windows 8)
2) Please before posting a [BUG] look for help from other users or Google, as probably it is not a bug but miss-configuration.
3) Bug concerning our software should be reported on GitHub at http://github.com/yubico

Thank you,
The Yubico Team.

Statistics: Posted by Tom — Thu Jan 31, 2013 11:31 am