Yubico Forum

I'm considering replacing my existing USB Yubikey with a Yubikey NEO, as I have purchased a phone with NFC capability. My question, though: is there an NFC adapter for a standard Windows machine that would function with a Yubikey? I'd love to not have to plug it in to a USB slot when I sat down at my work computer.

Currently not working on windows phone plaftorm. You should contact Microsoft and ask to support, this is probably the best way to motivate them in having a look at it.

_________________
-Tom

I'm not asking about any phone platform; I mean a standard desktop machine.

Any NDEF ISO 14443-4 reader?

_________________
-Tom

Does the Yubico Authenticator for desktop work on Windows work with the reader?

B

I'm also interested in this topic. I have a Sony Tap 11 tablet running Windows 8.1 and I can run the Yubico Authenticator and it asks me to insert my NEO into a USB slot, but I'd rather have the ability to use the inbuilt NFC reader as removing the fiddly panel to get at the single USB slot is not ideal. I know the NFC works as when I touch the NEO to the Tap 11, Windows prompts me to "Receive the data" and if I do, the Yubico web site pops up and confirms my NEO is working... I just need the Yubico Authenticator to register as a handler for the NFC data somehow.... sounds simple, but as I write software for a living, I can guarantee it wont be!

Also, for my desktop I've got an ASUS Z87-Deluxe/Quad motherboard and this has an NFC reader with it and a token that allows me to login to Windows by placing the NFC token onto the reader, so I'm going to see whether I can get the logon working with my NEO.

@Tom: If this is something Yubico are planning, I'm happy to beta test

Binky

Hrm alright, good to know, thank you. I can't find a reasonably priced, well reviewed device that fits this spec, unfortunately, but at least I know it's possible.

Not sure how this would work. The windows logon for local account works with Challenge Response over USB

Windows does not support OTP logon unless someone writes some hooks for the credential provider. Not sure if someone is already on the market

_________________
-Tom

One of the best way to handle logon authentication with a credential provider on Windows is to generate a digest (SHA1 or SHA2 depending on the OS) which is signed by a private key (usually inside your token) linked to a certificate available in the windows store, this is real PKI.

Almost off-topic but I would love to see this feature coming, among the support of OTP and U2F at same time.