I've configured two Yubikey NEOs using the Yubikey PIV manager to log me into my Mac running macOS Sierra 10.12.6 using a PIN. I can use either to log in, which is great. However, only the first one I programmed is able to automatically enable the screensaver when I unplug it when I activate Security & Privacy -> Advanced... -> Turn on screen saver when login token is removed.
I've tried everything I can think of:
- Program both keys to use the same certificate and key
- Program both keys to use the same PIN
- Program both keys to have the same HMAC-SHA1 secret key
- Re-pair both keys using the PIV Manager
- Pair only the non-working key using the PIV Manager
Both keys are firmware version 3.4.9. I have no idea why the second key just doesn't work.