Yubico Forum

We received recently a question over email where a customer was asking whether he can access his forum account if he has reprogrammed his YubiKey linked to his forum account.

The answer is...

We are assuming that after reprogramming the YubiKey, you have uploaded the AES Key to the online Yubico OTP validation server using the following link and you are again able to validate the OTP generated from the reprogrammed YubiKey with the online Yubico OTP validation server:

https://api.yubico.com/upload-aes-key/

As the reprogrammed YubiKey is now emitting a new Public ID, your forum user name and YubiKey Public ID mapping needs to be changed if you want to access your older forum account using the newly reprogrammed YubiKey.

To change the Yubico Forum user name and YubiKey mapping, please send the following information to forum@yubico.com using the email address that you registered while creating the forum account:

1) Your Forum account user name
2) Couple of OTPs from your new YubiKey
3) Couple of OTPs from your older YubiKey

Yubico Forum team will change the user name and YubiKey ID mapping so that you can access your forum account using the newly reprogrammed YubiKey.

We hope this helps!

>> As the reprogrammed YubiKey is now emitting a new Public ID...

What if I use the old Public ID to re-configure the key? Should the mapping work automatically?

The AES Key functionality requires that the Public ID of the reprogrammed YubiKey must start with vv prefix. This prefix is specially reserved for the AES Key upload functionality and not used for factory programming of the YubiKey.

As the AES Key functionality requires the Public ID of the YubiKey to start with vv, you can not upload the AES Key by programming your YubiKey with your old Public ID.

We hope this helps!

Would there be the possibility to map multiple yubikeys (public ID's) to the same forum account? Lastpass seems to allow this option for their service, but it would probably require some extra coding for the phpBB plugin, right?

As of now, you can assign only a single YubiKey to your forum account. In case if you lost your YubiKey associated with your forum account, you can always contact Yubico support and they can change the YubiKey associated to your forum account so that you can log-in using new YubiKey.

As you have pointed out correctly, providing an ability to assign multiple YubiKeys to your forum account would require some modifications to the phpBB plug-in.