Yubico Forum

I have a Yubico 2 firmware 2.01.1 and use it mainly in OTP mode for authenticating with LastPass. I would also like to use the static password option for use with TrueCrypt.

As I understand it I can program a static password into the second configuration of the key. Then if I hold the Yubikey button down for less than 5 seconds it types a OTP, more than 5 seconds and it types the static password.

However after programming a static password into configuration 2 and holding the button for over 5 seconds nothing it typed, the key light blinks rapidly a few times.

What am I doing wrong?

Many thanks for any help

Mine does this if I don't hold it down for the full 5 seconds, it will also do it if I wait too long. Try counting quickly 1001, 1002, 1003, 1004, 1005. You can practice in a text editor like notepad to get the timing right.

The YubiKey 2.0 has two configuration slots. When the YubiKey is shipped the first configuration slot is factory reprogrammed to OTP mode and the second configuration slot is left unchanged i.e. blank.

If you press the YubiKey button for 1-3 seconds the first configuration slot will emit the password. If you press the YubiKey for 4-5 seconds the second configuration slot will emit the password.

As you have reprogrammed the second configuration slot for the static password, you need to press the YubiKey button for 4-5 seconds so that the second configuration slot will emit the static password.

We hope this helps!

Hi,

I'm facing a similar problem with my yubikey. So I left the first slot intact (generates OTP as programmed by Yubico) and the second one I've set up to generate a static password.

I noticed the following:

- Touching the button for 1s - 2s -> generates OTP
- Touching the button for around 3s -> blinks three times and does nothing
- Touching the button for around 5s-7s -> generates the static password
- Touching the button for around 8s -> blinks three times and does nothing

What I find confusing is that in the manual it says:


From there i understand that I need to press from 2.5s to 5s to get my static password, which is not true in my case.
Is the manual wrong or what? And what do the three short blinks in the second case mean (i understand that the blinks in the last case mean "user initiated static password update")?

Another question, after generating an OTP or static password, the key's led stays off for 3-4 seconds. Is that normal?

There is a bit of overlap between recognizing config 1 and config 2 pressing. The documentation is actually not fully up to date here.

Config 1: 0.2 to 1.5 seconds
Config 2: 2 to 4 seconds

The "gap" between 1.5 and 2.0 is to prevent users from learning something that is close to the pivot point. If you then hold slightly too long or slightly too short, nothing shall happen.

Password update occurs after 8.0 to seconds or longer.


Yes - that's intentional. There is by design a short delay to prevent multiple unintentional triggers.