Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 1:16 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 4 posts ] 
Author Message
PostPosted: Sat Feb 16, 2013 2:34 am 
Offline

Joined: Sat Feb 16, 2013 2:00 am
Posts: 3
I have a problem with my VIP YubiKey firmware version 3.3.3

With the Yubikey Personalization Tool (v3.1.5) i was able to active the second (Dormant) configuration slot so i can use it with a YubiCloud service like LastPass.
After making the changes the Programming Status changed to "Slot1 and 2 configured". as explained here: http://forum.yubico.com/viewtopic.php?f=2&t=890
Then i decided to swap the configs because i will use LastPass more often so i guess the Yubicloud service is active on Slot 1 now.

Then i followed this manual to configure my YubiKey for LastPass http://helpdesk.lastpass.com/security-o ... h+LastPass

When trying to upload to Yubico i got some error about the OTP not being correct, so i disconnected my YubiKey and tried again.
Also pushing the Yubikey OTP button did not respond to my touching and the light was blinking 2 times slowly every like2 seconds, then i saw the Programming Status changed to "not configured" so i decided to use the "Restore Defaults" option on the setting page. Now i was able to follow the manual and "Upload to Yubico" and after this activate the YubiKey in LastPass and it is working perfect.

However i cant update Slot 2 anymore and it also says that Slot 2 is not configured, when i go to "update settings" and change for instance YubiKey(s) protected - Disable protection and click update
i get the message "Yubikey could not be configured. Perhaps protected with configuration protection access code"

How can i configure slot 2 now for use with Symantec VIP credential or some other service?

I never changed the access code.


Attachments:
File comment: The error when trying to update slot 2
yubikey_error_slot2.jpg
yubikey_error_slot2.jpg [ 128.73 KiB | Viewed 4849 times ]


Last edited by Milierkovic on Mon Feb 18, 2013 7:03 pm, edited 1 time in total.
Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Mon Feb 18, 2013 1:29 am 
Offline

Joined: Sat Feb 16, 2013 2:00 am
Posts: 3
Solved by contacting Yubico Support Team at support@yubico.com

Because nobody responded yet, i tried solving the problem myself and to make things worse
i found out that i accidentally overwrote my Symantec VIP OATH One-Time Password.

Only to find out that it is impossible to recover.

I made this mistake because apparently i read an outdated blog article (which i cant find anymore) where they were talking about a VIP YubiKey with an older firmware
which had a different setup.

How come you have such bad and outdated documentation about how to configure the new VIP YubiKey with 2.3.3 firmware.
And how is it not possible to see what is programmed at slot 1 and slot 2 in the Personalization Tool?
There should be a standard option in the tool to select slot 1 or slot 2 and see what is programmed OTP or OATH-HOTP etc and also see if the slot it is dormant or not.

Most video's on your http://vimeo.com/yubikey are outdated and the tutorial for using YubiKey with Gmail also (no longer) works because i only have an option when i enable 2-step verification to send me a text message or a voice message and i don't see a Barcode.
I was also send to http://www.yubico.com/totp in a the Gmail video to download the TOTP tool and that page no longer exists

Also the test server is not available after you uploaded a new Yibico OTP mode configuration, it takes you to the webpage http://www.yubico.com/1 which can not be found.

I am not satisfied at all and now i also lost the Symantec Validation and ID protection (VIP)

How can we solve this?


Last edited by Milierkovic on Mon Feb 18, 2013 11:00 pm, edited 2 times in total.

Top
 Profile  
Reply with quote  
PostPosted: Mon Feb 18, 2013 9:50 pm 
Offline
Yubico Team
Yubico Team

Joined: Mon Jul 23, 2012 9:59 pm
Posts: 27
Hello Sir,

We're sorry you've had issues with your VIP YubiKey. We have taken the liberty of shipping you a new VIP YubiKey free of charge.

To address your concerns:

How come you have such bad and outdated documentation about how to configure the new VIP YubiKey with 2.3.3 firmware.
> Yubico.com/vip is the page with the details of the current configuration and warning on overwriting the configs. We continue to update our existing documentation and
> will work to make it clearer.


And how is it not possible to see what is programmed at slot 1 and slot 2 in the Personalization Tool?
> The YubiKey is not designed to be queried as to it's configuration beyond whether slot 1 and/or slot 2 is configured and active.


There should be a standard option in the tool to select slot 1 or slot 2 and see what is programmed OTP or OATH-HOTP etc and also see if the slot it is dormant or not.
> This is not the way the YubiKey works - and is not something we can change in it's current design. But you can activate a slot (with a touch of the button) and see
> what comes out.
> A Yubico OTP will be 44 characters in length, and change each time the button is pressed.
>
> An OATH HOTP will be 6-8 characters in length and consist only of numbers. The numbers will change with each button press.
>
> A Static Password will be the same each time the button is pressed.
>
> A Challenge-Response will not output anything when the button is pressed. The YubiKey Cross-Platform Personalization Tool's Challenge Response tool can be used to > > test the challenge-response mode of a YubiKey


Most video's on your http://vimeo.com/yubikey are outdated and the tutorial for using YubiKey with Gmail also (no longer) works because i only have an option when i enable 2-step verification to send me a text message or a voice message and i don't see a Barcode.
> Google changes their UI very regularly. However, we've taken note of your comment and will plan an update in due course.


I was also send to http://www.yubico.com/totp in a the Gmail video to download the TOTP tool and that page no longer exists
> We cannot reproduce this issue [clicking on the link re-directs to http://www.yubico.com/applications/inte ... ces/gmail/ where the TOTP tool can be accessed].


Also the test server is not available after you uploaded a new Yibico OTP mode configuration, it takes you to the webpage http://www.yubico.com/1 which can not be found.
> We are unable to reproduce this issue as well [Clicking on the link redirects to http://demo.yubico.com/]


I am not satisfied at all and now i also lost the Symantec Validation and ID protection (VIP)
> We understand. We have authorized a new VIP YubiKey which will be sent to you.

_________________
-David Maples
Yubico Senior Solutions Engineer
http://www.Yubico.com


Top
 Profile  
Reply with quote  
PostPosted: Mon Feb 18, 2013 10:58 pm 
Offline

Joined: Sat Feb 16, 2013 2:00 am
Posts: 3
Thanks for the great service!

And the reason why i was not redirected to the correct pages (updated) is because i have a Mozilla Firefox plugin installed named HTTPS Everywhere
and the HTTPS pages do not redirect me to the new pages.

If i go to https://www.yubico.com/totp it stays on the same page displaying a message "404 Not Found!" but if i go to http://www.yubico.com/totp
i am redirected to http://www.yubico.com/applications/inte ... ces/gmail/ as it should.

The same with https://www.yubico.com/1 when u go there using http://www.yubico.com/1 i am redirected to http://demo.yubico.com/


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group