Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:07 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 5 posts ] 
Author Message
PostPosted: Wed Nov 15, 2017 6:04 pm 
Offline

Joined: Mon Nov 13, 2017 6:20 pm
Posts: 5
Hello all,

New user here so please forgive me if this has been asked before.

I have a Ubikey NEO and as supplied, this comes pre provisioned with OTP configured in slot one.

I have used authenticator to create some credentials. Where are these stored on the NEO - do they occupy space in one or other of the two slots, or somewhere completely separate?

How many protocols can be programmed in each slot. I'm guessing that in slot one which has the OTP pre programmed, that I can also set up Challenge-Response and Oath-HOTP but not Static Password as that would require a button push already being used by OTP, so Static Password would need to be programmed in slot 2 to work with a long button push?

Hope this makes sense.

John.


Last edited by Anaglypta on Thu Nov 16, 2017 8:46 pm, edited 1 time in total.

Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Thu Nov 16, 2017 1:58 am 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
Yubico Authenticator credentials are stored on the OATH applet, not in the slots, unless you change the setting in Yubico Authenticator to store in the slots.

Use the YubiKey Personalization Tool or the YubiKey Manager to see what kind of credentials can be programmed in the slots.


Top
 Profile  
Reply with quote  
PostPosted: Thu Nov 16, 2017 4:24 pm 
Offline

Joined: Mon Nov 13, 2017 6:20 pm
Posts: 5
Many thanks Chris,

Just to be certain, and so there is no doubt:-

You can programme one, and one only of Yubico OTP, OATH-HOTP, Static Password, or Challenge-Response in each of the two slots?

And in addition to the above, the key will also store Authenticator credentials, PGP Keys, Smart Card, and PIV certificates/credentials?

Thanks

John.


Top
 Profile  
Reply with quote  
PostPosted: Thu Nov 16, 2017 7:30 pm 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
Yes, my only correction would be "smart card". The smart card functionality (also referred to as CCID) includes three separate applets - OpenPGP, OATH (Yubico Authenticator), and PIV. When people say "smart card" when discussing the YubiKey, smart card typically = PIV.


Top
 Profile  
Reply with quote  
PostPosted: Thu Nov 16, 2017 8:49 pm 
Offline

Joined: Mon Nov 13, 2017 6:20 pm
Posts: 5
Many thanks Chris,

I now understand exactly what I can do with the key - For clarity I've marked this question as [SOLVED].

John


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Google [Bot] and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group