| Yubico Forum https://forum.yubico.com/ |
|
| [Question] Smartcard certificate creation https://forum.yubico.com/viewtopic.php?f=26&t=2031 |
Page 2 of 2 |
| Author: | ChrisHalos [ Wed Oct 19, 2016 4:34 pm ] |
| Post subject: | Re: [Question] Smartcard certificate creation |
YubiKey PIV Manager sets a CCC automatically when initializing with the application and setting the PIN (see version 1.3.0 - https://developers.yubico.com/yubikey-p ... Notes.html). The CHUID is set when you generate the key from the application. The application was developed to request certificates for logging into an Active Directory domain environment, and that continues to be the primary use. If you're on a Mac and you download Yubico PIV Tool (https://developers.yubico.com/yubikey-p ... /Releases/), it goes into your default downloads directory, and the name of the folder is yubico-piv-tool-1 (check your default downloads directory to confirm). On my Mac that means... cd ./Downloads/yubico-piv-tool-1/bin ./yubico-piv-tool [command] (I generally run ./yubico-piv-tool -a status most often) You should not mix use of the YubiKey PIV Manager and Yubico PIV Tool (unless you're starting with Yubico PIV Tool and you at minimum change the default management key). If the management key is left at default and you make any other changes with PIV Tool (change PIN, change PUK, etc.), YubiKey PIV Manager thinks nothing else has been done to the applet as the management key hasn't changed from the default (so if you run PIV Manager, you will get the initialize dialogue and it will force you to try and change your PIN). |
|
| Page 2 of 2 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|