Yubico Forum

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-04-04T20:26:05+01:00

ChrisHalos wrote:

Hey All -

For anyone experiencing this issue, did you set a configuration access code through the Personalization Tool application (i.e. "Configuration Protection")? If so, please remove it. The configuration access code prohibits you from reprogramming the key - that includes mode switching.

Regards,
Chris
Yubico Support

This helped me with my NEO-n. I think a better error code would be helpful. Perhaps:

"Yubikey core error: write error - is your card protected by a pin?"

Daniel

Statistics: Posted by DanTheColoradan — Sat Apr 04, 2015 8:26 pm

Re: [SOLVED] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-02-23T17:11:14+01:00

I also have the same problem, I as well just submited a ticket to support. On a side note mode 2 (aka -m82) works just fine. Not sure what the issues is. I have emailed support and I will update the thread once I have more information.

-Victor

Statistics: Posted by devx — Mon Feb 23, 2015 5:11 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-16T03:36:56+01:00

Thank you ChrisHalos, these steps resolved the issue I was having!

I have updated the subject/title of this post to [SOLVED].

Thank you,

Cody

Statistics: Posted by camorgan21 — Fri Jan 16, 2015 3:36 am

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-16T01:04:58+01:00

What I usually key off of is this:

If you notice that you are clicking to enable/disable a mode with the NEO Manager, then you click "OK" and nothing happens, it's likely configuration protection is enabled. After clicking OK, you should be instructed to unplug and reinsert your key (if configuration protection is disabled and the tool is working properly).

Removing configuration protection from the Personalization Tool:

1) On the "Settings" screen, click on the "Update Settings..." button at the bottom right.

2) Under "Configuration Protection", it'll show "YubiKey(s) unprotected - Enable Protection" regardless of whether you've set an access code or not (unfortunately). If you think it's enabled, click on the dropdown arrow and select "YubiKey(s) protected - Disable Protection".

3) It'll ask for the "Current Access Code". The most commonly used option is "Use serial number", which is five 0's followed by your 7 digit serial number. Enter in the access code, or click "use serial number" to automatically complete the field (if that's what you did initially).

4) Select a configuration slot

5) Click on the "Update" button. As long as you get the error message at the top of the Personalization Tool, you should go back to the NEO Manager and test the mode switch again.

Regards,
Chris

Statistics: Posted by ChrisHalos — Fri Jan 16, 2015 1:04 am

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-16T00:36:12+01:00

ChrisHalos wrote:

How do I know if this is setup on my Yubikey or not? I don't ever remember setting this up, and if I did how do I remove it?

Thanks,

Cody

Statistics: Posted by camorgan21 — Fri Jan 16, 2015 12:36 am

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-16T00:31:11+01:00

Statistics: Posted by ChrisHalos — Fri Jan 16, 2015 12:31 am

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-16T00:20:22+01:00

Tom2 wrote:

I am sorry but your description of the error "nothing happens" is not very exhaustive.

How are you testing the CCID interface? Did you power cycled the device? If you gpg --card-status what happens? Did you send some APDU ?

Anyway, please contact support at yubi.co/support for a warranty replacement, as i cannot see the applets listed in the NEO manager there might be something else wrong in there.

When I click on Change Connection Mode, and check the box for CCID (OTP+U2F are already checked) and then click "OK" nothing happens... like it never says configuring your yubikey or changing your setting, or successfully changed... Idk what it's suppose to say... or how I can explain this any better... but nothing happens after I click "OK"... and something should. I mean even the Change connection mode dialog box states, "For this setting to take effect, you will need to unplug, and re-attach your YubiKey" and after clicking "OK" with all three settings checked (OTP+CCID+U2F) nothing happens, it doesn't even say now unhook your Yubikey and plugin for changes to take effect!

I have submitted a support ticket to yubi.co/support as requested.

Statistics: Posted by camorgan21 — Fri Jan 16, 2015 12:20 am

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-15T14:23:24+01:00

Statistics: Posted by Tom2 — Thu Jan 15, 2015 2:23 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-14T21:25:19+01:00

I have attached the screenshots of the Yubikey NEO Manager as requested. Samething happens after checking the CCID box and clicking 'OK' in Neo Manager 1.1.0.... basically nothing happens! Please help!

Thanks,

Cody

Statistics: Posted by camorgan21 — Wed Jan 14, 2015 9:25 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-14T15:15:00+01:00

Could you please

send a screenshot of your Yubikey NEO manager 1.1.0 with the modes selected and 1 Yubikey inserted in your PC?

Btw the full combo mode is -m86

Statistics: Posted by Tom2 — Wed Jan 14, 2015 3:15 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-14T13:10:26+01:00

zviratko wrote:

I also have a fresh NEO v3.3 and it works under OSX with mgr v1.10

I think you should ty running the mgr program as administrator, if that didn't work, try an older version

Already did that:
- with and without administrative rights
- v1.10 and 1.00 ....

Statistics: Posted by jpdribbler — Wed Jan 14, 2015 1:10 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-14T11:36:47+01:00

I also have a fresh NEO v3.3 and it works under OSX with mgr v1.10

I think you should ty running the mgr program as administrator, if that didn't work, try an older version

Statistics: Posted by zviratko — Wed Jan 14, 2015 11:36 am

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-14T13:11:30+01:00

Exact same problem here. I am not able to activate U2F beside OTP. Nothing happens when i try to activate them:
- yubikey-neo-manager-1.1.0-win
- Windows 8.1
- Yubikey-NEO 3.3.0

Please help!

//edit:

Also tried to run the program as administrator. 1.0.0 also did not work.

Statistics: Posted by jpdribbler — Sun Jan 11, 2015 2:53 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-09T17:36:27+01:00

I have tried this from a Windows 7 64-Bit OS and from Windows 8.1 64-Bit OS. Still receive the same error or issues when trying to enable OTP+CCID+U2F on my Yubikey-NEO 3.3.0. I still only have OTP+U2F enabled.

Thanks,

Cody

Statistics: Posted by camorgan21 — Fri Jan 09, 2015 5:36 pm

Re: [QUESTION] Enable OTP+CCID+U2F on Yubikey-NEO 3.3.0

2015-01-05T11:32:59+01:00

Hello,

Please could you give us more information such as operating system, architecture etc ?

Thank you.

Statistics: Posted by Tom2 — Mon Jan 05, 2015 11:32 am