Yubico Forum

Re: [SOLVED] Unable to revert to HID from CCID mode on a yub

2015-06-20T22:19:10+01:00

Indeed all woes I had with my yubikey neo on my linux installation (now running debian 8/Jessie) turned out to be caused by pcscd not running.
In case other users of a yubikey neo experience issues with the neomanager or yubi authenticator you may want to check whether the pcscd daemon is running with: Code:
/etc/init.d/pcscd status

If it is not running it is likely that the aformentioned utilities report the following errormessage: error: Code:
ykneomgr_init (-4): Backend error

Once the daemon has been started with: Code:
/etc/init.d/pcscd start
the utilities start to function correctly and the errormessage will not be reported again.
Hope this explanation may help those who have also encountered this issue.

Statistics: Posted by erikie — Sat Jun 20, 2015 10:19 pm

Re: [SOLVED] Unable to revert to HID from CCID mode on a yub

2015-04-25T04:10:59+01:00

As I posted to https://aur.archlinux.org/packages/yubi ... nager-git/ you need pcscd running on Linux to resolve this.

Statistics: Posted by chx — Sat Apr 25, 2015 4:10 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-09-25T10:27:26+01:00

Ok Tom and others who addressed this topic(thx for your reactions so far).
The issue has been resolved now.
@Tom: like you suspected the issue was caused to my work PC.
Apparently (due to internal security constraints) it was unable to load the correct drivers for the NEO though this was not readily apparent other than the neo manager program reporting "error: ykneomgr_init (-4): Backend error".

I have installed the neo manager utility on a XP PC with no such restrictions and when I inserted the NEO after which the correct drivers were loaded.
I could then change the mode of my NEO back to HID+CCID+eject - I loaded the OATH applet using the NEO manager and then I loaded my key(s) using the desktop OATH utility.
When all was done I could then login into my google account using 2FA.
FYI I used the latest available neo manager (0.1.0)which can be downloaded from the Yubico GIT pages.

Once again thx for everyone's input and for those who encounter a similar issue it may be worthwhile the use the neo manager utility on a PC with less or no enforced hardware restrictions with regards to it's USB interfaces!

Statistics: Posted by erikie — Thu Sep 25, 2014 10:27 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-16T08:55:43+01:00

Please use apt-get to install software https://launchpad.net/~yubico

Also, you have to touch the Yubikey NEO to inject the card correctly (check the device manager). Do this from Windows because your configuration under Linux doesn't look proper

Statistics: Posted by Tom — Fri May 16, 2014 8:55 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-16T06:56:02+01:00

erikie wrote:

@diraimondo: you reported you compiled the software yourself.
I wonder whether you initially ran into the same compile problems as I did, and if so: how did you resolve it?

Thx in advance for your advice & kind regards, Erik...

I've used the AUR repository of Arch Linux: it does everything by itself.

Statistics: Posted by diraimondo — Fri May 16, 2014 6:56 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-16T00:28:43+01:00

Statistics: Posted by erikie — Fri May 16, 2014 12:28 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-16T00:19:01+01:00

Ok - bit the bullet and tried to compile the software contained at: https://github.com/Yubico/libykneomgr-dpkg as advised by Tom.
I used the latest version (0.1.3) - untarred it and executed the instructions contained on said webpage.
Initially the "./configure" bombed out due to a dependency on libzip, so installed that package (I am running debian 7 wheezy).
After this install I executed "./configure" again which appeared to run to completion without any error, BTW (as per instructions) it needs to be executed with option "--with-backend=pcsc" because otherwise it will try to compile with a non-existant windows library (ate least on my Wheezy) system which will not work.
Then executed "make check" which now bombs out with a fatal error on internal.h line 37 which refers to a missing winscard.h (apparently for a windows build).
I inspected this internal.h and found and on lines 32-38 #ifdefs for PCSC and (default) windows.
For a quick possible fix just to get it compiled removed #ifdefs lines 33, 36-38 in effect skipping the default winscard.h however it bombs out again but now on PCSC/wintypes.h so clearly I am missing some crucial sourcecomponent here.
@Tom as the question is now: how do I resolve this? Is it contained somewhere on github? Should I download another Yubico software package to resolve this? Or should I install some special package in the standard Debian 7 repository?

Please advise....

Thx in advance for any help on this and kind regards, Erik...

Statistics: Posted by erikie — Fri May 16, 2014 12:19 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-15T23:24:31+01:00

Actually there appears a later version (libykneomgr-0.1.2-win64.zip) but alas - same results.

Statistics: Posted by erikie — Thu May 15, 2014 11:24 pm

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-15T23:21:46+01:00

Thx for your very quick reply diraimondo - appreciated.
I did find a windows version (since you indicated in your post that you were only able to do that "under Windows") - for those in need to resolve a similar problem here goes the link:
http://opensource.yubico.com/libykneomgr/releases.html

I downloaded win64 zip - unpacked it and executed the ykmgr command but got met with the following error:
<<<>>>
C:\Users\erik.vanasperen\Desktop\ykneomgr\bin>ykneomgr -M82
error: ykneomgr_init (-4): Backend error

C:\Users\erik.vanasperen\Desktop\ykneomgr\bin>
<<<>>>
Did this with the NEO inserted with and without touching the button.
Any idea what cause this error? Am I missing a library? Some other possible issue?
Or is it just yet another indication that the Yubico ykneomgr software simply cannot handle the NEO when it is in CCID mode only?
BTW this exercise was attempted with the software in zipfile libykneomgr-0.1.1-win64.zip

Any advice would be much appreciated...

THX & kind regards, Erik...

Statistics: Posted by erikie — Thu May 15, 2014 11:21 pm

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-15T22:54:56+01:00

erikie wrote:

Now on your reported solution (ykneomgr): I searched for a windows version but did not find any safe the official source package on github. Did you actually compile it yourself or do you have a link of a compiled installable version (trying to avoid to go thru the hoops & loops of compiling it myself) ?
Your advice would be much appreciated...

Sorry, I'm using Linux (Arch) and I compiled myself using AUR. I can't help you on Windows.

Statistics: Posted by diraimondo — Thu May 15, 2014 10:54 pm

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-05-15T22:49:38+01:00

Pardon me for my late reply but did not have the time yet to try the possible solution indicated by Tom.
Anyway - @diraimondo:
No, I do not know for sure whether my botched NEO actually DOES work as a fully functional CCID as I have not put it to use (as a CCID device). However when my NEO is inserted W7 DOES recognize it as a CCID and does attempt to load a CCID driver.
Now on your reported solution (ykneomgr): I searched for a windows version but did not find any safe the official source package on github. Did you actually compile it yourself or do you have a link of a compiled installable version (trying to avoid to go thru the hoops & loops of compiling it myself) ?
Your advice would be much appreciated...

THX in advance & kind regards, Erik...

Statistics: Posted by erikie — Thu May 15, 2014 10:49 pm

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-04-30T18:18:53+01:00

I was able to fix my problem using "ykneomgr -M82" but only under Windows after touching the key.

update: it didn't work under Linux because gnome-keyring-daemon creates problems on the usage of the CCID profile. Killing it, ykneomgr works well.

Statistics: Posted by diraimondo — Wed Apr 30, 2014 6:18 pm

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-04-30T09:27:07+01:00

How do you know that it is correctly working as CCID device under linux? I can't see anything in the log of pcscd in the log. I'm using Arch Linux.

Statistics: Posted by diraimondo — Wed Apr 30, 2014 9:27 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-04-30T09:24:55+01:00

These are the same kind of errors I encountered too.
However the NEO is known within W7 as well as Linux Wheezy as a CCID device.
Unfortunately I cannot give an update yet on the suggested solution as I needed to set my self up on GIT and have not yet been able to find the time to follow thru on it.
Hopefully this weekend I will be able to do so.

Statistics: Posted by erikie — Wed Apr 30, 2014 9:24 am

Re: Unable to revert to HID from CCID mode on a yubikey NEO

2014-04-29T17:00:22+01:00

I'm stuck in the same way with my yubikey NEO. Trying to load an applet with neoman I've changed the mode in CCCID only and now every application gives back an error trying the read my yubikey neo.

Code:

$ dmesg | tail -n1
[12453.718487] usb 2-1.1: new full-speed USB device number 34 using ehci-pci

$ lsusb | grep -i yubi
Bus 002 Device 034: ID 1050:0112 Yubico.com

$ ykpersonalize 
Yubikey core error: no yubikey present

$ ps aux | grep pcsc
root     19011  0.0  0.0  10676   716 ?        Ss   18:20   0:00 /usr/bin/pcscd --foreground --auto-exit

$ ykneomgr -d -m
SCardEstablishContext 2148532253
error: ykneomgr_init (-4): Backend error

How to reset it or change mode.

Thanks.

Statistics: Posted by diraimondo — Tue Apr 29, 2014 5:00 pm