Yubico Forum

Hi there,

I recognized a possible Problem with the Yubikey Neo and Windows 8.1 (Not sure if it's really a Problem).

When I configure my Yubikey Neo for Login and Restart the Computer the following happens.
If i never plugged in the Neo in a specific USB-Port, and Login with the Yubikey Neo it succeeds.
If i previously already plugged in this Yubikey to an USB-Port once, the Yubikey isn't recognized on Login anymore.

It seems, that, if the device was already installed once in Windows 8.1, it's no longer recognized for challenge Response.
Strange issue.

Any ideas on it?

Please elaborate this two sentences so that we are able to reproduce the issue.

_________________
-Tom

I'll try to.

For example I have 2 USB-Ports on my PC.

I plug in the Neo into the first port (where it has already plugged in once). I can't login, when the authentication with Yubikey ist active.
It just tells me, that I have to plug in the Yubikey to Login.

I plug in the Neo into the second port (where it never has been plugged in before). I can Login, when the authentication with yubikey is active and the Yubikey is recognized.
Now I restart my PC.
I plug in the Neo into the second port again (where it now has already plugged in previously). I can't login anymore with the Yubikey and it's no longer recognized for login.

I hope the description is detailed enough.

It looks more like a Windows problem.

Did you applied this patch already: http://support.microsoft.com/kb/2917929

_________________
-Tom

I've already Windows 8.1 Update 1 with all Patches installed.

Maybe it has something to do with Update 1?

Try to install the USB driver from your board manufacturer.

Or using a USB 2.0 hub and see if you notice differences.

My blind opinion of your description is that it is a Windows issue as the NEO either works or doesn't.

_________________
-Tom

Maybe it has something to do with Windows 8.1 U1 and USB 3.0?
All ports I tested were USB 3.0 Ports.

Edit:

Tried in on a USB 2.0 Hub. Same problem.
I doesn't seem to have something to do with, if the Yubikey was already plugged in once.

If I newly plugin the Yubikey in any port (In all ports the Yubikey was previously plugged in), the first few Login-Atempts won't work.
When I wait a while, at some Point I can Login, without changing anything.


Edit:

I futher troubleshooted this issue. Slowly it Comes clearer.
If the Yubikey Neo is in HID + CCID Mode with Touch Eject, I get above effect (Sometimes the SHA-1 Challange Response works and sometimes it doesn't)
If the Yubikey Neo is in HID Mode it works flawless.


It seems like an issue I described in the Yubikey Neo Forum where I used the TOTP Helper Program and sometimes the TOTP Helper Program worked and sometimes it gave back "Can't read Serial number" or something like that.
It Looks like a General issue with SHA-1 Challenge Response and Mode 82. What do you think? When I'm in CID-Mode both Scenarios work without Problems and every time as Long the Yubikey is recognized.