Yubico Forum

Re: [QUESTION] How do I use PKCS#11 keygenerate on Neo?

2015-03-14T12:46:23+01:00

That wouldn't help, as the software I want to use needs to generate it's keys via the PKCS#11 interface.
The question I'm basically asking is: is this at all possible with the Yubikey Neo?

(FWIW, using the piv-tool works.)

Statistics: Posted by jpmens — Sat Mar 14, 2015 12:46 pm

Re: [QUESTION] How do I use PKCS#11 keygenerate on Neo?

2015-03-12T22:04:10+01:00

I would probably start with generating keys via yubico-piv-tool rather than pkcs11-tool.

Statistics: Posted by Uriel — Thu Mar 12, 2015 10:04 pm

[QUESTION] How do I use PKCS#11 keygenerate on Neo?

2015-03-11T13:04:14+01:00

Hello, I have a Yubikey Neo with firmware v3.3.0 configured with -m82 (OTP and CCID), and I want to use some code which utilizes the PKCS#11 interface to the smart card.

When I attempt to do so, I get an error as shown here:

Code:

pkcs11-tool --module=/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so --pin 123456 --keypairgen --key-type rsa:1024 --label 'jp1' --id 1
Using slot 2 with a present token (0x5)
error: PKCS11 function C_GenerateKeyPair failed: rv = CKR_FUNCTION_NOT_SUPPORTED (0x54)

What do I have to set on the Neo to be able to accomplish this?

Thanks.

Statistics: Posted by jpmens — Wed Mar 11, 2015 1:04 pm