Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 10:26 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 1 post ] 
Author Message
PostPosted: Wed Aug 09, 2017 2:40 pm 
Offline

Joined: Thu Aug 03, 2017 2:56 am
Posts: 4
I'm running into a few issues which I think are related but I have not been able to make much progress on figure any of them out.

I have a couple of Neo and a Nano4 keys, my intent is to have 3 nearly identical keys for the purpose of using 1 at home always in my primary computer (Nano)
A NEO backup key for recovery purposes kept in the safe in case the 2nd NEO is lost
A NEO primary key on my keychain for use in the office/etc...

My intended use cases for this are:
-Logging into Windows/Mac/Linux with Challenge-Response HMAC-SHA1 configuration (Implemented but I don't remember if the Neo has it)
-Using LastPass for password management (Yubikey OTP) (Implemented in all keys)
-Using U2F functionality of the key for Google/Facebook/etc (Implemented in all keys)
-Using the GPG/PIV functionality to log into ssh sessions and sign (Made progress in Mac/Raspberry Pi but not my laptop)

My laptop is one of the primary use cases since I use it every day and I suspect this is where my problems are.
First issue is that when I don't have a Yubikey plugged in and start Yubikey NEO Manager, there's a report of a phanton/ghost yubikey that doesn't have a serial number, does not support U2F/FIDO and the only enabled mode is OTP. When I change the connection mode, it shows CCID as selectable but trying to toggle that results in an error message about Slot protection. I have used USBDeview on Support's suggestion to remove all devices with Yubikey identifier 1050 but that didn't make a difference. I have gone through a Windows 10 Creator Update and that did not resolve the issue either.
Second issue is using Yubikey command line tools like ykpersonalize:
Some commands work, others don't:
C:\Program Files (x86)\Yubico\ybikey-personalization\bin>ykinfo.exe -s
serial: 530xxx
C:\Program Files (x86)\Yubico\ybikey-personalization\bin>ykinfo.exe -c
Yubikey core error: timeout

However the same sequence on the NANO reports differently
C:\Program Files (x86)\Yubico\ybikey-personalization\bin>ykinfo.exe -c
capabilities: 0c0101ff0xxxxxxxxxxxxxxccccccglcibff

Then while trying to use gpg commands to edit the card on my laptop I get this as the result:
C:\Program Files (x86)\Yubico\ybikey-personalization\bin>gpg --card-status
gpg: selecting openpgp failed: Card not present
gpg: OpenPGP card not available: Card not present

While on a Mac I get this as the result:
gpg --card-status
Application ID ...: D276000124010200000605xxxxxx
Version ..........: 2.0
Manufacturer .....: Yubico
Serial number ....: 053xxxx
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: forced
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 3
Signature counter : 0
Signature key ....: [none]
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

I haven't even gotten to the part of actually moving my keys to the Yubikey yet (I understand I can do it with my Mac but if I'm going to be using the key on my laptop most of the time and it's not working then I will probably not have much success on getting further once I move the keys over with my Mac)

I'd like to figure out how to remove the ghost Yubikey without doing a full format of the laptop (Not an acceptable option)


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Metager [Bot] and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group