Yubico Forum

Re: Support for OTP+U2F mode?

2015-01-02T23:59:58+01:00

Quote:

I already configured my Neo-3.3 with the -m6 mode and am using it with both Google and OTP. Now the Manager app tells me I enable the OTP+UTF+CCID mode.

How did you do this? I just purchased my first Yubikey-NEO (so yes I am a noob also) and its running 3.3.0. When I open Neo Manager 1.1.0 it shows OTP+U2F modes enabled. I am not able to choose CCID mode. I would like to enable all three modes, OTP+CCID+U2F.

After checking the CCID box and clicking 'OK' in Neo Manager 1.1.0, nothing happens. Is my Yubikey-NEO broke or am I doing something wrong?

After reading through this entire post, I also tried the command line version "ykpers-1.16.2-win64" and got the following error message when trying to enable all three modes OTP+CCID+U2F.

Code:

C:\Users\cmorgan\Downloads\ykpers-1.16.2-win64\bin>ykpersonalize -m6
Firmware version 3.3.0 Touch level 1551 Program sequence 3

The USB mode will be set to: 0x6

Commit? (y/n) [n]: y
Yubikey core error: write error

***EDIT*** In case I wasn't suppose to reply to this trend, I have posted my question here for everyone else to see. http://forum.yubico.com/viewtopic.php?f=26&t=1698

Thanks,

Cody

Statistics: Posted by camorgan21 — Fri Jan 02, 2015 11:59 pm

Re: Support for OTP+U2F mode?

2014-11-26T02:14:19+01:00

andres01 wrote:

Hi!
Newbie as I am I wonder how to get my Yubikey neo FW 3.30 to work with OTP and U2F.
Enabling OTP and U2F with Neo Manager 1.0.0 is no problem, but when I do, my possibility to log in to Password Safe disappears. Password Safe cannot find the Yubikey.

Thanks
Andres

I would also like the 3.3 firmware. I got one of the first Neos when they went up on the store and I'm sad I can't use it with OTP and U2F. I'm stuck on 3.1.2

Statistics: Posted by DustoMan — Wed Nov 26, 2014 2:14 am

Re: Support for OTP+U2F mode?

2014-11-23T00:46:21+01:00

I just received an answer from Yubico about my problem.

Quote:

Hello Sybren -

Thank you for contacting Yubico Support. We have sent a few test NEOs to the developers of Password Safe to look into why the keys won't authenticate when U2F is turned on with OTP. You may want to consider temporarily disabling U2F so you can use Password Safe and the Windows Logon Tool. As we don't control Password Safe, we can't guarantee if/when this functionality will work.

Regarding the Logon Tool, we have notified our development team of the trouble you are having, and we've also confirmed we're seeing the same behavior on our end. We hope to have an answer for you by mid next week on the Logon Tool. We have marked this case for followup and we will contact you next week to let you know what we've found, and determine if we need to release a new build of the Logon Tool.

Best Regards,
Yubico Support Team

I hope some of you find an answer in here as well.

Statistics: Posted by sybrenromer — Sun Nov 23, 2014 12:46 am

Re: Support for OTP+U2F mode?

2014-11-21T21:52:36+01:00

I'm having the same problem as Patschi (The Logon Administration not working) and also Password Safe doesn't work anymore..

Ik would like to know what's going on here as well.

Statistics: Posted by sybrenromer — Fri Nov 21, 2014 9:52 pm

Re: Support for OTP+U2F mode?

2014-11-21T15:51:20+01:00

Patschi wrote:

But sadly YubiKey Logon Administration (https://www.yubico.com/applications/com ... ows-login/) isn't working when both modes are activated (the "Configure" button is greyed out). I would appreciate a fix for that as well

May I get an answer please?

Statistics: Posted by Patschi — Fri Nov 21, 2014 3:51 pm

Re: Support for OTP+U2F mode?

2014-11-21T11:41:12+01:00

Pushing the button ejects the card emits OTP and inserts the card
Default will talk CCID
When the FIDO client (CHROME) will look for u2f devices it will go in u2f mode for a while allowing you to touch the button during authentication.

Touching the button per se, does not break things.

If it does so, it is a new feature

Statistics: Posted by Tom — Fri Nov 21, 2014 11:41 am

Re: Support for OTP+U2F mode?

2014-11-20T21:16:08+01:00

I already configured my Neo-3.3 with the -m6 mode and am using it with both Google and OTP. Now the Manager app tells me I enable the OTP+UTF+CCID mode.

Will pushing this button break authentication with one of the already configured modes?

Statistics: Posted by SanderG — Thu Nov 20, 2014 9:16 pm

Re: Support for OTP+U2F mode?

2014-11-20T14:32:13+01:00

Ander01 you got private message from me.

Statistics: Posted by Tom — Thu Nov 20, 2014 2:32 pm

Re: Support for OTP+U2F mode?

2014-11-20T13:13:55+01:00

Statistics: Posted by andres01 — Thu Nov 20, 2014 1:13 pm

Re: Support for OTP+U2F mode?

2014-11-20T08:49:48+01:00

When the browser prompts you for touch, simply touch the key. Not long press
Just normal touch as you would do for Yubico OTP in slot one.

Statistics: Posted by Tom — Thu Nov 20, 2014 8:49 am

Re: Support for OTP+U2F mode?

2014-11-20T06:16:00+01:00

With the official release of NEO manager 1.0 and Chrome 39 for Windows, I went ahead and got my Yubikey swapped over to having everything enabled. Now I have it working with both OTP and U2F services. However I'm experiencing a newbie moment. What is the proper method to invoke each type? When I plug in my NEO I get a steady green light and when I press it I get a OTP. Through fumbling on my part I was able to get U2F to work, however I honestly have no idea how. Is it a long press? A remove and reinsert? Sorry for the stupid question.

Statistics: Posted by Wayren — Thu Nov 20, 2014 6:16 am

Re: Support for OTP+U2F mode?

2014-11-19T23:52:25+01:00

The yubikey-neo-manager-1.0.0-mac.pkg works great, thanks!

Now I can use just one yubikey for both LastPass and Google.

Thank you!

Statistics: Posted by appliancejunk — Wed Nov 19, 2014 11:52 pm

Re: Support for OTP+U2F mode?

2014-11-19T20:45:14+01:00

Hey All,

Thanks for helping us test the NEO Manager. We now have the official releases on our developer site - you can access them at:

https://developers.yubico.com/yubikey-n ... /Releases/

Thanks for all your assistance! As always, please let us know if there are any issues.

Statistics: Posted by David — Wed Nov 19, 2014 8:45 pm

Re: Support for OTP+U2F mode?

2014-11-19T20:38:29+01:00

Installed v1.0.0 right now. Works fine! Also Avast does not output any warnings.

But sadly YubiKey Logon Administration (https://www.yubico.com/applications/com ... ows-login/) isn't working when both modes are activated (the "Configure" button is greyed out). I would appreciate a fix for that as well

Statistics: Posted by Patschi — Wed Nov 19, 2014 8:38 pm

Re: Support for OTP+U2F mode?

2014-11-19T20:26:58+01:00

droctogon wrote:

dpeters11 wrote:

Patschi wrote:

I'm currently using Chrome v38 with the recommended extension by Yubico, so I thought it should also work on the stable one. Does this really only work v39?

Correct, Chrome 39 is the one that supports both modes being enabled simultaneously.

Chrome v39 stable was just released to the masses, specifically 39.0.2171.65 (64-bit).
I wasn't able to find any reference to FIDO or U2F in the Chromium changelog for this release as compared to an arbitrary v38 release:
https://chromium.googlesource.com/chromium/src/+log/a4033fa68ed3a84019ed1b2cbcd9289b14c153d0..b853bfefba0da840f4574eb3b5c7ad6e9b8573b5/?pretty=full&s=c130d99551dbef05e6a95641585cd31b882b6147

Latest Yubico-Neo-Manager release is 0.2.5, and it's still preventing OTP + U2F simultaneous modes. I hope the next release will include this functionality, whenever that will be.

Just confirmed that the recently released v1.0.0 (i see what you did there) does work with aforementioned version of chrome 39 and 3.3.0 firmware NEO device works simultaneously with OTP (long press) and U2F (web registered). Thanks (elder sign)... Great work Yubico & Dave!

Neo-Manager changelog for those interested: https://github.com/Yubico/yubikey-neo-m ... aster/NEWS

Statistics: Posted by droctogon — Wed Nov 19, 2014 8:26 pm