Yubico Forum

So. I'm fairly technically-capable. I've spent the last few hours trying to install all the software, and configure it as necessary, to install the applet on my NEO … but no luck.

I've successfully installed GPShell and all its dependancies, but when I try to install the applet, I get the following:



As far as I can tell, the Yubikey isn't being registered “as a smartcard.” Not sure how to make it register as a smart-card, instead of as a keyboard.

(Side-note: I've used ykpersonalize -m82 to set my card to act as both an HID and CCID device; but I'm not sure if that's relevant. Didn't seem to help.)

Once I've got this all working, I may be arsed to submit a tutorial on how to get everything installed on OS X … it's kind of a cluster<beep>.

As you mention OSX, are you sure that you have enabled the current stock driver for NEO?

You might find it easier to use the pre-compiled driver for OSX instead: https://github.com/martinpaljak/osx-cci ... r/releases

Regarding basic applet installation I'm confident that my gp tool provides way simpler usability compared to gpshell: https://github.com/martinpaljak/GlobalPlatform#usage

_________________
OpenKMS GlobalPlatform - simple way to manage applications on your NEO
Applet Playground - explore open source JavaCard applications
PGP: 0x307E3452

Everyone,

Please move to the Yubikey NEO manager
http://opensource.yubico.com/yubikey-neo-manager/

Its a GUI and it is user friendly for those who do not feel comfortable with command lines tools.

_________________
-Tom

regarding the PIV Applet:

It says I have a PIV-II card



but:

turned out that since I enabled the support for the PIV_II Applet in PCSC now gpg cannot directly access the openpg applet anymore so I tried telling scdaemon to use pcsc instead first I wanted to know wether I could see a openpgp smartcard with opensc but



appearently it does not see a openpgp card.

just to be sure I told scdaemon to use pcsc



unfortunately:

The problem is that scdaemon in gnupg2 is very "greedy" with respect to PCSC: it requires exclusive access. This means that the OpenSC tokend driver on OS X will prevent scdaemon from working properly.

You can get it back working again by killing any other application which is using PCSC. Then your card should work fine with gnupg.

I'm currently working on a fix for this in my own branch of gnupg, which you can find here: https://github.com/darconeous/gnupg/tre ... mon-behave

Hi, I have a NEO-n and did not work with the yubico authenticator.
I followed the instruction in the first post to install the yubioath applet but for some reason, it failed.

mode_211
enable_trace
establish_context
card_connect
select -AID a000000003000000
Command --> 00A4040008A000000003000000
Wrapped command --> 00A4040008A000000003000000
Response <-- 6F658408A000000003000000A5599F6501FF9F6E06479112103800734A06072A864
886FC6B01600C060A2A864886FC6B02020101630906072A864886FC6B03640B06092A864886FC6B0
40255650B06092B8510864864020103660C060A2B060104012A026E01029000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4
f -enc_key 404142434445464748494a4b4c4d4e4f
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864
886FC6B03640B06092A864886FC6B040255650B06092B851086486
4020103660C060A2B060104012A026E01029000
Command --> 80500000086B65E9BCBFD664AC00
Wrapped command --> 80500000086B65E9BCBFD664AC00
Response <-- 0000413803782893057902020001FEF557D1E12AECFB480701E958259000
mutual_authentication() returns 0x80302000 (The verification of the card cryptogram failed.)

but now yubico authenticator, slot 1, slot 2, u2f all seem to be working fine. Which is good except for the fact that my NEO-n's LED is now flickering.
about once every 2 seconds. Is there anyway to fix this? Have i broke my yubikey?

I get a very similar error on install. How do we fix this, what might be wrong?

Thanks for the sarcastic response, Tom2. That doesn't exactly help us, it just indicates why we're having difficulties. I'm personally hoping to install newer versions of apps onto an older card, which should still be possible. Some research that I had to do on my own and that you could have mentioned here turned up that the default key was changed from a known value to a random value, reducing the value of the YubiKey, but not reducing the cost. It would be nice if there were some way to algorithmically determine our keys and then install apps, but since YubiCo doesn't seem to have documented that process, if it's even possible, simply saying "This only works on YubiKey Neo with serial numbers less than 300000 or on the YubiKey Neo Developer Edition" would have been a better answer..