Yubico Forum

Hi Folks,

I also have the Nokia 820 and I have run into the same problem.
Using the instructions above, I've solved the issue - but it gave me a major headache , because the instructions a a bit cryptic (which is understandable given the fact that we're talking cyptography

So here's my guide what to do:

UWE'S GUIDE HOW TO ENABLE YOUBIKEY NEO WITH WINDOWS PHONE 8 USING WINDOWS 8 OR 7

FIRST STEP: SET NDEF STRING
(taken form youbikey Website: https://helpdesk.lastpass.com/security-options/multifactor-authentication-options/yubikey-authentication/#YubiKey+NEO+with+Windows+Phone+8+App)

1. After you've registered the YubiKey with your LastPass account, ensure that mobile access is "disallowed" in your LastPass Icon > My LastPass Vault > Account Settings link > YubiKey tab.

2. Then download the Personalization Tool from Yubico at http://www.yubico.com/personalization-tool

3. In the Personalization tool, select the "Tools" option from the menu at the top

4. In the Tools menu, select the NDEF Programming Option

5. In the NDEF Programming option page, select Configuration Slot 1. Set the NDEF Type to "URI (http://..)", then in the NDEF payload field, type: "https://lastpass.com/mobile/?otp="

6. Press the Program button to write the NDEF2 string to your YubiKey NEO

SECOND STEP: SET YOUBIKEY TO SMARTCARD AND OTP MODE (MODE 82)

1. Download the ykpersonalize tool at http://yubico.github.io/yubikey-personalization/releases.html

2. Unzip it to your hard drive

3. Execute "[path]/bin/ykpersonalize -m82" (where [path] is the path to which you unzipped the tool)

4. Unplug the yubikey NEO

6. Reinsert the yubikey NEO

7. Verify that "Microsoft Usbccid (WUDF)" appears as a device in the smart Card section of device Manager

THIRD STEP: APPLY THE FIX

1. Download the WP8 fix at http://forum.yubico.com/download/file.php?id=24 (see post above)

2. Unzip it to your hard drive and extract the "gp_wp8fix" file.

3. Download to GPShell tool at http://sourceforge.net/projects/globalplatform/files/

4. Unzip it to your hard drive, copy the gp_wp8fix file from step 2 into the GPSShell directory (where gpshell.exe is located)

5. Navigate to the Directory where gpshell.exe is located and execute "gpshell.exe gp_wp8fix"

6. Output should look like in the post above by Tom

7. Unplug yubikey

USE WITH WINDOWS PHONE 8 AS SHOWN HERE:
https://helpdesk.lastpass.com/security-options/multifactor-authentication-options/yubikey-authentication/#YubiKey+NEO+with+Windows+Phone+8+App

On the previous page, someone said it should be -m82

I did -m82 and I can confirm it helped(I am using Windows 8, nonmobile, on Samsung ATIV Smart PC).

I am super duper HAPPY to report that your procedure helped me make my Yubikey Neo work on my Windows 8 phone - a Nokia Lumia 1520 today.

The only thing I would like to say is that in your second step 2, #7:...instead of what you mentioned........ "7. Verify that "Microsoft Usbccid (WUDF)" appears as a device in the smart Card section of device Manager"....my PC shows me this info under Smart card section:

Identity Device (NIST SP 800-73 PIV)

Otherwise, the rest of the tutorial was 100% what you typed.

so, thanks a lot for posting this tutorial.

The only thing remains is....the phone logs me on and then shows the message which goes something like "do you wanna go to this website"..........that is mentioned on Lastpass's tutorial for NEO....so I was prepared....little annoying...but the cancel button gets rid of it

Hi All,

Everything works great for me up until I try to run the gp_wp8fix, which returns the following [not sure if I need to include the full responses]:

mode_211
enable_trace
establish_context
card_connect
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A0607[...]
Command --> 8050000008E2DF0F215973E34900
Wrapped command --> 8050000008E2DF0F215973E34900
Response <-- 000033170172[...]
mutual_authentication() returns 0x80302000 (The verification of the card cryptogram failed.)

GPG --card-status is returning info correctly, and I have no other smartcards installed in Windows 7 x64.

Any ideas?

Thanks for your help.

your key is not in mode 82 I'm afraid.

Please read this: http://www.yubico.com/2014/07/yubikey-neo-updates/

You probably have a new production Yubikey NEO.

_________________
-Tom

Ah thanks Tom.

I'm new to GPShell so I'm guessing I'll have to generate and import some new keys to use with the open_sc command somehow?

- Tim

Update:
The more I look into this it looks like I'd need to know certain privileged keys in order to change the master key on a production device in the first place. Would this be the case?
If so, am I able to obtain a fix for my production device somehow? Or exchange for a developer version if easier?

timeames85,

could you detail what are you trying to achieve with the NEO? This will help us support you better. All applets comes pre-installed so not sure what you need to change.

Tom.

_________________
-Tom

Hi Tom,

I'm trying to get my NEO working reliably with Lastpass via NFC on my Windows 8.1 Phone (Lumia 930), which I think involves running the gp_wp8fix?

Thanks for your help.