Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 10:16 am

All times are UTC + 1 hour

Post new topic Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Mon Jul 06, 2015 11:04 pm 

Joined: Wed Aug 10, 2011 5:19 pm
Posts: 1
I've lost my old Yubikey and want to configure my new Yubikey to have my old Yubikey's OTP id. By default, Yubikey's servers have overwrite protection, can I get the ID deleted out so I can re-register it?


Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Jul 08, 2015 9:25 am 
User avatar

Joined: Wed Jul 08, 2015 8:58 am
Posts: 6
Location: Denmark
Unfortunately, no.

Besides you OTP id you are also missing the encryption key in the device which is shared with Yubico. Because this key is impossible to extract (without destroying you device or use advance ninja hacking skills) from the device (and is securely stored at Yubico) you cannot make a clone of a Yubikey (which is the whole point of the device).

If it was possible to reassign a new Yubikey (with a new encryption key) to an existing Yubikey id it would be a serious security issue because a "not so nice person" could contact Yubico, change the Yubikey for the Yubico id to his own Yubikey and get past the 2-factor authentication.

To have a backup yubikey it is possible on must services to assign multiple yubikey devices so you still can login if one of you devices disappear.

Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour

Who is online

Users browsing this forum: No registered users and 3 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group