Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:06 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 33 posts ]  Go to page Previous  1, 2, 3, 4
Author Message
PostPosted: Wed Dec 06, 2017 12:41 pm 
Offline

Joined: Tue Feb 02, 2016 9:23 pm
Posts: 58
oderbang wrote:
Hi I can also confirm this issue
Certificate are issued via the PIV manager or CSIS Enrollment Station

we recently had all the Yubikey replaced due to the weak crypto issue. (just 2 months ago) we have now started to see odd laptop remote user having this issue.
I can confirm uninstalling the mini driver from "Apps & features" and Device manager resolves the issue.

But as the driver is auto pushed (we are not blocking it) is there anyway to find out exactly what is wrong with the new driver/setup

as said in one announement post, The new Driver by Yubi uses a different format for the storage which doesnt rely on the original slots anymore, this removes cross-compatibility because the new system probably doesnt work everwhere, but also has benefits like using multiple certs of the same type and more certs in general.

although it would really have helped if the PIV Manager would have allowed to 1) store the certs in the new container format and 2) make the mappings towards the slots so you can select which certs out of that container can be also used as slots.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Mon Dec 18, 2017 9:19 am 
Offline

Joined: Mon Dec 18, 2017 9:10 am
Posts: 1
does that mean the smart card certs need to be regenerated/reinstalled on the yubikey?
Has anyone else tried this?

just removing the Minidriver seem to solve the issue, no need to roll back the driver from "Yubikey Smart Card" to generic PIV NIST driver


Top
 Profile  
Reply with quote  
PostPosted: Wed Jan 17, 2018 10:47 am 
Offline

Joined: Mon Sep 05, 2016 7:30 am
Posts: 11
Hit by this as well.

Does anyone know the exact update name so I can un-approve it from WSUS?

I would prefer to not blacklist the device ID since some complained that the device did not work after that.

Does anyone know does OpenSC support the new "container" on-card format or will it be supported?


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 33 posts ]  Go to page Previous  1, 2, 3, 4

All times are UTC + 1 hour


Who is online

Users browsing this forum: Google [Bot] and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group