Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 8:54 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 8 posts ] 
Author Message
PostPosted: Mon Feb 23, 2015 1:52 am 
Offline

Joined: Mon Feb 23, 2015 1:47 am
Posts: 7
I purchased a new YubiKey Neo for $50 on Amazon, and I can connect it to my laptop and use it for both U2F and OTP authentication, but if I try to type ykinfo -v to show the version information as per this guide ( https://www.yubico.com/2012/12/yubikey-neo-openpgp/ ) or if I download Yubikey Personalization Tool, both show No YubiKey Inserted or similar error messages. I'm unable to proceed to enabling openpgp authentication with this yubikey, which was the primary purpose for which I bought it. PLease advice me on how to proceed.

As posted in a followup, I have to manually run as administrator to get this to work. Unfortunately, nearly every windows application released in the last decade can request administrator permission if needed at launch time. This is a bug, and is unacceptable behavior in this day and age.


Last edited by aarcane on Mon Feb 23, 2015 2:35 am, edited 1 time in total.

Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Mon Feb 23, 2015 2:33 am 
Offline

Joined: Mon Feb 23, 2015 1:47 am
Posts: 7
Apparently the problem is that none of the yubico tools request administrator permissions when they need them. This is no longer a question, but a bug. I'll edit the tag appropriately.


Top
 Profile  
Reply with quote  
PostPosted: Mon Feb 23, 2015 11:49 am 
Offline
Site Admin
Site Admin

Joined: Mon Dec 08, 2014 2:52 pm
Posts: 314
Right click on the files in the folder, windows may mark these file coming from the Internet to require admin rights to be executed.

This is a configuration on your machine, not depending on the software you downloaded.

see screenshot
Attachment:
Unblock file.png
Unblock file.png [ 12.4 KiB | Viewed 3578 times ]


Top
 Profile  
Reply with quote  
PostPosted: Tue Mar 31, 2015 7:55 pm 
Offline

Joined: Tue Mar 31, 2015 7:50 pm
Posts: 3
I have the exact same issue.

Even worse - PasswordSafe 3.35 also requires administrator rights to access the Yubikey.

The end result is that to open PasswordSafe, I need to:

1. Execute PasswordSafe.
2. Click "Yes" in the Run As Admin? message box.
3. Type in my password.
4. Click the Yubikey button in PasswordSafe.
5. Click the physical button on my Yubikey NEO.

This is simply insane. Way too many steps.

Not to mention that running PasswordSafe (or any other program that doesn't need admin rights) as administrator is simply a bad idea.

What's the problem? Can you someone explain to me why the Yubikey NEO cannot be accessed by programs with non-admin rights?

Thanks,

Alon


Top
 Profile  
Reply with quote  
PostPosted: Sat Apr 04, 2015 2:07 pm 
Offline

Joined: Fri Apr 03, 2015 11:11 am
Posts: 2
advance wrote:
Can you someone explain to me why the Yubikey NEO cannot be accessed by programs with non-admin rights?

It works fine here using non-administrative applications (including applications I've written myself). :?

It might help to give details about your computer setup, what security software are you using, do you use a USB hub and/or do you use yubikey applications such as the logon administration tool?


Top
 Profile  
Reply with quote  
PostPosted: Mon Apr 06, 2015 2:32 am 
Offline

Joined: Tue Mar 31, 2015 7:50 pm
Posts: 3
Windows 8.1, no security software, no USB hub, no Yubikey accessing application except for Yubikey Personalization Tool and PasswordSafe 3.35.

Didn't have to install any kind of driver, iirc.

Are you sure you aren't running your apps using an Admin account?


Top
 Profile  
Reply with quote  
PostPosted: Fri Apr 10, 2015 11:17 am 
Offline

Joined: Fri Apr 03, 2015 11:11 am
Posts: 2
advance wrote:
Are you sure you aren't running your apps using an Admin account?
Yes, I also tested limited Guest accounts and they were able to communicate with the Yubikey.

I made this application to see what error codes you're getting and also show some paths that you might need later when checking the driver or symbolic link permissions:

Image

Please reply with any error codes (other than Vendor Mismatch)

Attachment:
YubiKeyDeviceDetect.zip [90.37 KiB]
Downloaded 72 times


Top
 Profile  
Reply with quote  
PostPosted: Tue Apr 14, 2015 6:14 pm 
Offline

Joined: Tue Mar 31, 2015 7:50 pm
Posts: 3
Would appreciate getting the source code, so I can build it myself instead of running unknown apps..

Also, download link is dead.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 11 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group