Yubico Forum

Re: Ubuntu 12.04 - udev rules for YubiKey NEO in mode 84

2014-12-01T19:19:08+01:00

Are you referencing this issue? https://developers.yubico.com/yubikey-p ... Issue.html

Since I installed the Yubikey Personalization Tool from the Yubico PPA, do I still need to do this workaround?

Statistics: Posted by rfkrocktk — Mon Dec 01, 2014 7:19 pm

Re: Ubuntu 12.04 - udev rules for YubiKey NEO in mode 84

2014-11-27T14:30:10+01:00

Please read documentation before posting or changing settings:
https://developers.yubico.com/yubikey-personalization/

Statistics: Posted by Tom — Thu Nov 27, 2014 2:30 pm

Re: Ubuntu 12.04 - udev rules for YubiKey NEO in mode 84

2014-11-26T22:24:26+01:00

Any ideas? Is my USB device in read-only mode? How could I check?

Statistics: Posted by rfkrocktk — Wed Nov 26, 2014 10:24 pm

Re: Ubuntu 12.04 - udev rules for YubiKey NEO in mode 84

2014-11-25T23:48:46+01:00

Okay, so that enabled me to be able to --card-edit, but now I have a different problem. I can't seem to edit any of the values on the card:

Code:

gpg/card> admin
Admin commands are allowed

gpg/card> sex
Sex ((M)ale, (F)emale or space): m
gpg: sending command `SCD SETATTR' to agent failed: ec=6.87
gpg: error setting sex: general error

How do I fix this?

Statistics: Posted by rfkrocktk — Tue Nov 25, 2014 11:48 pm

Re: Ubuntu 12.04 - udev rules for YubiKey NEO in mode 84

2014-11-25T23:40:38+01:00

After getting the same error in Ubuntu 14.04, disabling U2F (mode 0x82 if I remember correctly) did the trick for me.

Statistics: Posted by tp42 — Tue Nov 25, 2014 11:40 pm

Ubuntu 12.04 - udev rules for YubiKey NEO in mode 84

2014-11-25T23:13:20+01:00

I'm trying to setup my YubiKey on Ubuntu 12.04. While I'm aware that I can't setup U2F until I can get to a supported operating system (of which Ubuntu 12.04 LTS is _not_ one), I'm having trouble setting up my YubiKey NEO with OpenPGP.

Here's the rule I currently have at /etc/udev/rules.d/99-yubikey.rules

Code:

SUBYSTEMS=="usb", ATTRS{idVendor}=="1050", ATTRS{idProduct}="0111", OWNER="tk", GROUP="plugdev", MODE="0660"

I set the device mode to 84:

Code:

ykpersonalize -m84

I remove the device, wait a second or two, then plug it back in again. Next:

Code:

gpg --card-edit

To which I receive the following error message:

Code:

gpg: selecting openpgp failed: ec=6.32848
gpg: OpenPGP card not available: general error

It seems that my permissions might not be working.

I have disabled "gnome-keyring-daemon --start --components=gpg" from starting on session login, and manually run "gpg-agent --daemon". How can I get this working again?

Statistics: Posted by rfkrocktk — Tue Nov 25, 2014 11:13 pm