Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 3:43 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Thu Apr 11, 2013 8:40 pm 
Offline

Joined: Thu Apr 11, 2013 8:04 pm
Posts: 3
Hi everyone,

Currently I have YubiRADIUS setup in a pilot to act as a 2-factor authentication system for my university's Palo Alto firewall SSL VPN. We bought some YubiKeys, re-programmed them using the personalization tool, and imported the information into the server. Everybody appears to like the Yubikey solution over our old 2-factor authentication system and I am starting to expand the system to support smart devices with YubiApp. Testing with my own account looks to be going okay, but I have some concerns regarding the long term use of keys.

Based on information posted here in the forum I already know its not possible to delete YubiKeys from the YubiRADIUS server (physical or YubiApp). When looking at the YubiApp registration page I also see that for one physical YubiKey you can only register 3 more keys for YubiApps. So what do I do once I have created 3 YubiApp keys and need to generate a new one? For example, I'm already using two right now (one for my Android phone and one for my iPad). When I replace my phone next year I will have to generate a new key which will total 3. What happens if I replace my iPad and want to setup YubiApp?

On the YubiApp Registration page of my server, if I try to upload an AES key for "YubiKey Type: Key 1" I get the message "You have already registered YubiApp for the chosen YubiKey Type."

Is there any other answer than just saying, "You will have to reprogram the physical YubiKey and then regenerate keys for your YubiApp devices"?

Thanks for the support.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Jul 31, 2013 12:28 pm 
Offline
Yubico Team
Yubico Team

Joined: Mon Feb 22, 2010 9:49 am
Posts: 183
Hello,

Yes! You will have to reprogram the physical YubiKey and then regenerate keys for your YubiApp devices.

Thanks and best regards,
Samir.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group