Yubico Forum

Re: [SOLVED] Yubikey 4 with Keepass 2 -Dosent work

2016-05-22T11:15:58+01:00

I had the same problem, after many tries never managed to make OTP work with Keepass.

As suggested, switched to Keechallenge, works like a charm.

Statistics: Posted by r00f — Sun May 22, 2016 11:15 am

Re: [SOLVED] Yubikey 4 with Keepass 2 -Dosent work

2016-04-05T08:48:18+01:00

I recommend using KeeChallenge instead.
http://www.kahusecurity.com/2014/securi ... nd-factor/

Statistics: Posted by Tom2 — Tue Apr 05, 2016 8:48 am

Re: [Question] Yubikey 4 with Keepass 2 -Dosent work

2016-04-03T21:33:44+01:00

Hey Ho thanks to all.
I try it just not out but the solution seems to be the Look-Ahead Accound.
Thanks for this Information.

Statistics: Posted by HDDControler — Sun Apr 03, 2016 9:33 pm

Re: [Question] Yubikey 4 with Keepass 2 -Dosent work

2016-04-03T19:06:59+01:00

ChrisHalos wrote:

If using OATH-HOTP, you'll also want to make sure that the "Look-ahead count" is AT MINIMUM 5 (between 5 and 10 seems to work consistently).

Maybe you should add this tip to your own guide. I currently use challenge-response mode. Thanks. (Wouldn't be implementing HMAC-SHA256 far more secure?)

Statistics: Posted by horvathrudolf — Sun Apr 03, 2016 7:06 pm

Re: [Question] Yubikey 4 with Keepass 2 -Dosent work

2016-04-03T18:29:57+01:00

If using OATH-HOTP, you'll also want to make sure that the "Look-ahead count" is AT MINIMUM 5 (between 5 and 10 seems to work consistently). Since it's counter-based, even one OATH-HOTP sent outside of KeePass will make your counter out of sync and the look-ahead count is used to mitigate this issue.

You are correct, though, that Challenge-Response (at least in my opinion) is a more useful option, and you can use the same Challenge-Response credential for other services.

Statistics: Posted by ChrisHalos — Sun Apr 03, 2016 6:29 pm

Re: [Question] Yubikey 4 with Keepass 2 -Dosent work

2016-04-03T14:46:42+01:00

Hello and thanks for your answer.

I must tell you that i find out how it is Funktion. You MUST THAKE THE CALLANGE-RESPONSE MODE.
Oh i hope i have write it correctly. But Then ist is O.K. . It works.

After i bekame an answer i Close tis thread. As Sucesssfull.

I Repeat : The Goal is The Cannenge- ...Mode.

Byby

Statistics: Posted by HDDControler — Sun Apr 03, 2016 2:46 pm

Re: [Question] Yubikey 4 with Keepass 2 -Dosent work

2016-04-03T09:10:34+01:00

You have to press and hold your yubikey button for several seconds in order to get the slot 2 output.
If you only press it shortly, you get your slot 1 output (yubikey OTP).

Apart from this, I have the same problem. I tried all steps four times. When I finally try to open my locked KeePass file, I enter my password, select OTP and then I have to enter 3 OTPs. I press and hold my yubikey button and an 8-digit code is entered. I choose the second and then third text field and repeat the process twice. So all (three) text fields contain a different 8-digit code and when I press "OK", I get "Failed to create OTP key!".

Statistics: Posted by horvathrudolf — Sun Apr 03, 2016 9:10 am

[SOLVED] Yubikey 4 with Keepass 2 -Dosent work

2016-04-03T21:36:29+01:00

Hello and greatings to all.

1.
Ive done with a brand new Yubikey 4 (not Neo) the following steps. And I become a error after the fields are filled. But I can recover the Passwordfile sucessfull. The Hexadecimal Code isnt incorrect. I repeat Ist is the correct Hex Code. I done my yubikey4 "restore to Defaults". And now i do the Prozedure live again. Please say me there are my fault(s) or mistakes.

2. Thirst Things Thirst:

O.S. Version : Microsoft Windows 10
Keepass Version: 2.3.2
otpkeyprov Version: 2.4
yubikey-personalization-gui Version: 3.1.24
3. lets go:

I open the Yubikey....gui:
I go to Settings:
cange Enter to off
I go to oath-hotp :
And i Switch to the second Slot .
then i thake the next Settings

I disable Oath-Token Identifier

Check thé Box: Hotp-Length 8 Digits

Then i push the"generate" button and Copy the Hex-Code into a Textfile.

then i press Write Configuration
see Pictures above:

That Looks like so:

yubisetupend.PNG

Thats all for the Yubikey at first. the next ive done in Keepass. See the Next Pictures:

open keepass and create new Password datafile. Ive put a Password in and select one time Password then i hit ok.
puthexin.PNG
When i try to open this error Comes:
error.PNG

Im Verry verry Hopefully for Help.
Please Help.

Statistics: Posted by HDDControler — Sat Apr 02, 2016 4:06 pm