Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 8:45 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 6 posts ] 
Author Message
PostPosted: Tue Dec 24, 2013 5:04 pm 
Offline

Joined: Mon Mar 04, 2013 6:57 pm
Posts: 5
Hello all and merry Christmass !

I'm back for holidays and I decided to play with the NEO a little bit. So my NEO is 3.0.3 and I have the following questions:

a) I tried to programm slot 2 to have a static password and then programm NDEF to export the static password from slot 2 instead of the OTP from slot 1. I used the personalization tool, selected slot 2 and pressed program. Nothing happened, I even tried switching to text from URI but still nothing. It seems it's hardcoded to always use slot 1 and use the original url. I had to re-programm slot 1 to contain the static password and use slot 2 for OTP (new key, uploaded on the server) to make it work (now NDEF exports the static password instead of the OTP). So is this normal, e.g. is this feature supported only on newer firmware versions or did I do something wrong ?

b) OpenPGP card has 0 for card manufacturer (test card) and 00000001 for serial number and it seems that this happens on all Yubikey NEOs. I read on github that you have an assigned manufacturer ID (06) and that the idea is to use Yubikey's serial as the OpenPGP card's serial on card's AID. So will you update your build script to e.g. run ykinfo -s to get the serial number and create a unique AID each time the applet gets uploaded on the NEO ? If I do this manualy (because I plan on updating the applet from available source on github) and set manufacturer ID to 06 and serial to my NEO's serial will that be futureproof or you have an alternative strategy ?

Thanks a lot for your time :-)


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Jan 15, 2014 11:00 pm 
Offline

Joined: Fri Jan 10, 2014 10:44 pm
Posts: 7
MickFlemm wrote:
Hello all and merry Christmass !
b) OpenPGP card has 0 for card manufacturer (test card) and 00000001 for serial number and it seems that this happens on all Yubikey NEOs. I read on github that you have an assigned manufacturer ID (06) and that the idea is to use Yubikey's serial as the OpenPGP card's serial on card's AID. So will you update your build script to e.g. run ykinfo -s to get the serial number and create a unique AID each time the applet gets uploaded on the NEO ? If I do this manualy (because I plan on updating the applet from available source on github) and set manufacturer ID to 06 and serial to my NEO's serial will that be futureproof or you have an alternative strategy ?

Thanks a lot for your time :-)


Any update on this ?

How can we change the opengpg AID of NEO ? Should we modify the code and recompile the applet ?

Thanks !


Top
 Profile  
Reply with quote  
PostPosted: Thu Jan 16, 2014 8:34 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
MickFlemm wrote:
Hello all and merry Christmass !

b) OpenPGP card has 0 for card manufacturer (test card) and 00000001 for serial number and it seems that this happens on all Yubikey NEOs. I read on github that you have an assigned manufacturer ID (06) and that the idea is to use Yubikey's serial as the OpenPGP card's serial on card's AID. So will you update your build script to e.g. run ykinfo -s to get the serial number and create a unique AID each time the applet gets uploaded on the NEO ? If I do this manualy (because I plan on updating the applet from available source on github) and set manufacturer ID to 06 and serial to my NEO's serial will that be futureproof or you have an alternative strategy ?

Thanks a lot for your time :-)



We are doing some thinking around this. This will probably be addressed in the next release of the firmware, we will consider providing you with a script to do that.

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Fri Oct 17, 2014 9:00 pm 
Offline

Joined: Thu Nov 21, 2013 2:19 pm
Posts: 1
Any update on this
Tom wrote:
MickFlemm wrote:
Hello all and merry Christmass !

b) OpenPGP card has 0 for card manufacturer (test card) and 00000001 for serial number and it seems that this happens on all Yubikey NEOs. I read on github that you have an assigned manufacturer ID (06) and that the idea is to use Yubikey's serial as the OpenPGP card's serial on card's AID. So will you update your build script to e.g. run ykinfo -s to get the serial number and create a unique AID each time the applet gets uploaded on the NEO ? If I do this manualy (because I plan on updating the applet from available source on github) and set manufacturer ID to 06 and serial to my NEO's serial will that be futureproof or you have an alternative strategy ?

Thanks a lot for your time :-)



We are doing some thinking around this. This will probably be addressed in the next release of the firmware, we will consider providing you with a script to do that.


Any update on this?


Top
 Profile  
Reply with quote  
PostPosted: Mon Oct 20, 2014 7:38 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Yes, all Yubikey NEOs are shipped with serial number now.

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Mon Oct 20, 2014 7:39 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Yes, all Yubikey NEOs are shipped with serial number now.

_________________
-Tom


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group