Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:02 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 41 posts ]  Go to page Previous  1, 2, 3, 4, 5  Next
Author Message
PostPosted: Mon Jul 29, 2013 8:45 pm 
Offline

Joined: Mon Jul 29, 2013 8:15 pm
Posts: 1
Hi Folks,

I also have the Nokia 820 and I have run into the same problem.
Using the instructions above, I've solved the issue - but it gave me a major headache , because the instructions a a bit cryptic (which is understandable given the fact that we're talking cyptography ;-)

So here's my guide what to do:

UWE'S GUIDE HOW TO ENABLE YOUBIKEY NEO WITH WINDOWS PHONE 8 USING WINDOWS 8 OR 7

FIRST STEP: SET NDEF STRING
(taken form youbikey Website: https://helpdesk.lastpass.com/security-options/multifactor-authentication-options/yubikey-authentication/#YubiKey+NEO+with+Windows+Phone+8+App)

1. After you've registered the YubiKey with your LastPass account, ensure that mobile access is "disallowed" in your LastPass Icon > My LastPass Vault > Account Settings link > YubiKey tab.

2. Then download the Personalization Tool from Yubico at http://www.yubico.com/personalization-tool

3. In the Personalization tool, select the "Tools" option from the menu at the top

4. In the Tools menu, select the NDEF Programming Option

5. In the NDEF Programming option page, select Configuration Slot 1. Set the NDEF Type to "URI (http://..)", then in the NDEF payload field, type: "https://lastpass.com/mobile/?otp="

6. Press the Program button to write the NDEF2 string to your YubiKey NEO

SECOND STEP: SET YOUBIKEY TO SMARTCARD AND OTP MODE (MODE 82)

1. Download the ykpersonalize tool at http://yubico.github.io/yubikey-personalization/releases.html

2. Unzip it to your hard drive

3. Execute "[path]/bin/ykpersonalize -m82" (where [path] is the path to which you unzipped the tool)

4. Unplug the yubikey NEO

6. Reinsert the yubikey NEO

7. Verify that "Microsoft Usbccid (WUDF)" appears as a device in the smart Card section of device Manager

THIRD STEP: APPLY THE FIX

1. Download the WP8 fix at http://forum.yubico.com/download/file.php?id=24 (see post above)

2. Unzip it to your hard drive and extract the "gp_wp8fix" file.

3. Download to GPShell tool at http://sourceforge.net/projects/globalplatform/files/

4. Unzip it to your hard drive, copy the gp_wp8fix file from step 2 into the GPSShell directory (where gpshell.exe is located)

5. Navigate to the Directory where gpshell.exe is located and execute "gpshell.exe gp_wp8fix"

6. Output should look like in the post above by Tom

7. Unplug yubikey

USE WITH WINDOWS PHONE 8 AS SHOWN HERE:
https://helpdesk.lastpass.com/security-options/multifactor-authentication-options/yubikey-authentication/#YubiKey+NEO+with+Windows+Phone+8+App


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Aug 14, 2013 6:19 pm 
Offline

Joined: Wed Aug 14, 2013 6:17 pm
Posts: 1
Quote:
3. Execute "[path]/bin/ykpersonalize -m32" (where [path] is the path to which you unzipped the tool)

On the previous page, someone said it should be -m82

I did -m82 and I can confirm it helped(I am using Windows 8, nonmobile, on Samsung ATIV Smart PC).


Top
 Profile  
Reply with quote  
PostPosted: Sat Jun 21, 2014 11:07 pm 
Offline

Joined: Sat Jun 21, 2014 10:59 pm
Posts: 10
viewtopic.php?f=26&t=1409


Top
 Profile  
Reply with quote  
PostPosted: Thu Jun 26, 2014 11:40 pm 
Offline

Joined: Thu Jun 26, 2014 11:29 pm
Posts: 1
I am super duper HAPPY to report that your procedure helped me make my Yubikey Neo work on my Windows 8 phone - a Nokia Lumia 1520 today.

The only thing I would like to say is that in your second step 2, #7:...instead of what you mentioned........ "7. Verify that "Microsoft Usbccid (WUDF)" appears as a device in the smart Card section of device Manager"....my PC shows me this info under Smart card section:

Identity Device (NIST SP 800-73 PIV)

Otherwise, the rest of the tutorial was 100% what you typed.

so, thanks a lot for posting this tutorial.

The only thing remains is....the phone logs me on and then shows the message which goes something like "do you wanna go to this website"..........that is mentioned on Lastpass's tutorial for NEO....so I was prepared....little annoying...but the cancel button gets rid of it :-)

uweinside wrote:
Hi Folks,

I also have the Nokia 820 and I have run into the same problem.
Using the instructions above, I've solved the issue - but it gave me a major headache , because the instructions a a bit cryptic (which is understandable given the fact that we're talking cyptography ;-)

So here's my guide what to do:

UWE'S GUIDE HOW TO ENABLE YOUBIKEY NEO WITH WINDOWS PHONE 8 USING WINDOWS 8 OR 7

FIRST STEP: SET NDEF STRING
(taken form youbikey Website: https://helpdesk.lastpass.com/security- ... hone+8+App)

1. After you've registered the YubiKey with your LastPass account, ensure that mobile access is "disallowed" in your LastPass Icon > My LastPass Vault > Account Settings link > YubiKey tab.

2. Then download the Personalization Tool from Yubico at http://www.yubico.com/personalization-tool

3. In the Personalization tool, select the "Tools" option from the menu at the top

4. In the Tools menu, select the NDEF Programming Option

5. In the NDEF Programming option page, select Configuration Slot 1. Set the NDEF Type to "URI (http://..)", then in the NDEF payload field, type: "https://lastpass.com/mobile/?otp="

6. Press the Program button to write the NDEF2 string to your YubiKey NEO

SECOND STEP: SET YOUBIKEY TO SMARTCARD AND OTP MODE (MODE 82)

1. Download the ykpersonalize tool at http://yubico.github.io/yubikey-persona ... eases.html

2. Unzip it to your hard drive

3. Execute "[path]/bin/ykpersonalize -m82" (where [path] is the path to which you unzipped the tool)

4. Unplug the yubikey NEO

6. Reinsert the yubikey NEO

7. Verify that "Microsoft Usbccid (WUDF)" appears as a device in the smart Card section of device Manager

THIRD STEP: APPLY THE FIX

1. Download the WP8 fix at download/file.php?id=24 (see post above)

2. Unzip it to your hard drive and extract the "gp_wp8fix" file.

3. Download to GPShell tool at http://sourceforge.net/projects/globalplatform/files/

4. Unzip it to your hard drive, copy the gp_wp8fix file from step 2 into the GPSShell directory (where gpshell.exe is located)

5. Navigate to the Directory where gpshell.exe is located and execute "gpshell.exe gp_wp8fix"

6. Output should look like in the post above by Tom

7. Unplug yubikey

USE WITH WINDOWS PHONE 8 AS SHOWN HERE:
https://helpdesk.lastpass.com/security- ... hone+8+App


Top
 Profile  
Reply with quote  
PostPosted: Mon Jul 28, 2014 5:04 pm 
Offline

Joined: Mon Jul 28, 2014 4:35 pm
Posts: 5
Hi All,

Everything works great for me up until I try to run the gp_wp8fix, which returns the following [not sure if I need to include the full responses]:

mode_211
enable_trace
establish_context
card_connect
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A0607[...]
Command --> 8050000008E2DF0F215973E34900
Wrapped command --> 8050000008E2DF0F215973E34900
Response <-- 000033170172[...]
mutual_authentication() returns 0x80302000 (The verification of the card cryptogram failed.)

GPG --card-status is returning info correctly, and I have no other smartcards installed in Windows 7 x64.

Any ideas?

Thanks for your help.


Top
 Profile  
Reply with quote  
PostPosted: Mon Jul 28, 2014 9:41 pm 
Offline

Joined: Sat Jun 21, 2014 10:59 pm
Posts: 10
your key is not in mode 82 I'm afraid.


Top
 Profile  
Reply with quote  
PostPosted: Tue Jul 29, 2014 11:32 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
timeames85 wrote:
Hi All,

Everything works great for me up until I try to run the gp_wp8fix, which returns the following [not sure if I need to include the full responses]:

mode_211
enable_trace
establish_context
card_connect
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A0607[...]
Command --> 8050000008E2DF0F215973E34900
Wrapped command --> 8050000008E2DF0F215973E34900
Response <-- 000033170172[...]
mutual_authentication() returns 0x80302000 (The verification of the card cryptogram failed.)

GPG --card-status is returning info correctly, and I have no other smartcards installed in Windows 7 x64.

Any ideas?

Thanks for your help.



Please read this: http://www.yubico.com/2014/07/yubikey-neo-updates/

You probably have a new production Yubikey NEO.

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Wed Jul 30, 2014 12:03 pm 
Offline

Joined: Mon Jul 28, 2014 4:35 pm
Posts: 5
Ah thanks Tom.

I'm new to GPShell so I'm guessing I'll have to generate and import some new keys to use with the open_sc command somehow?

- Tim

Update:
The more I look into this it looks like I'd need to know certain privileged keys in order to change the master key on a production device in the first place. Would this be the case?
If so, am I able to obtain a fix for my production device somehow? Or exchange for a developer version if easier?


Top
 Profile  
Reply with quote  
PostPosted: Mon Aug 04, 2014 9:44 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
timeames85,

could you detail what are you trying to achieve with the NEO? This will help us support you better. All applets comes pre-installed so not sure what you need to change.

Tom.

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Mon Aug 04, 2014 10:40 am 
Offline

Joined: Mon Jul 28, 2014 4:35 pm
Posts: 5
Hi Tom,

I'm trying to get my NEO working reliably with Lastpass via NFC on my Windows 8.1 Phone (Lumia 930), which I think involves running the gp_wp8fix?

Thanks for your help.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 41 posts ]  Go to page Previous  1, 2, 3, 4, 5  Next

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group