Yubico Forum

Hi, folks,

If you like to host your own Yubikey OTP validation server, here is the Java-based solution:

http://code.google.com/p/yubikey-server-j/

Follow the setup guide to get it running. Let us know of further questions and comments.

Cheers

_________________
The YubiKey Server Guy

I'm answering 2 questions from emails:

[1] Yes this is the same server Yubico uses at api.yubioc.om

[2] Java doc was added, how could I forget it?!

yubico-val-server/javadoc/index.html

_________________
The YubiKey Server Guy

Hi!
I'm trying to deploy the management server in java and it seems I need the AES keys for validation. How can I get the AES keys?

Thanks

Folks, here is a new way, the web way of retrieving your AES keys here and now:

viewtopic.php?f=5&t=185

Cheers

Below was the old way of doing it:

If you host your own Yubikey OTP validation server, you need to import your Yubikeys' secret AES keys into your validation server database. In order to get the AES keys, please send the following to Support@Yubico.com:

[1] 2 consecutive OTPs generated from each Yubikey as proof of possession.

[2] Your GPG (or PGP) public key so we can encrypt your AES keys to send to you. It looks like this:




*GPG is free to use. If you need help on GPG, here is a very well written and authoritative doc at:

http://www.gnupg.org/gph/en/manual.html

[3] By default Yubico generates a CSV file with your keys. If you tell us which validation server you use, or what kind of SQL INSERT statement you want, Yubico can generate the SQL script for you to insert them all into your database in a snap.

---

Though we can still send you in plain text if you like but we suggest them encrypted by your public key, so no one else can decrypt and use your AES secrets.

Protect the secret after you got it. Since if stolen, someone can clone a Yubikey identical as yours.

Regards

_________________
The YubiKey Server Guy