Yubico Forum

I have a problem with my VIP YubiKey firmware version 3.3.3

With the Yubikey Personalization Tool (v3.1.5) i was able to active the second (Dormant) configuration slot so i can use it with a YubiCloud service like LastPass.
After making the changes the Programming Status changed to "Slot1 and 2 configured". as explained here: http://forum.yubico.com/viewtopic.php?f=2&t=890
Then i decided to swap the configs because i will use LastPass more often so i guess the Yubicloud service is active on Slot 1 now.

Then i followed this manual to configure my YubiKey for LastPass http://helpdesk.lastpass.com/security-o ... h+LastPass

When trying to upload to Yubico i got some error about the OTP not being correct, so i disconnected my YubiKey and tried again.
Also pushing the Yubikey OTP button did not respond to my touching and the light was blinking 2 times slowly every like2 seconds, then i saw the Programming Status changed to "not configured" so i decided to use the "Restore Defaults" option on the setting page. Now i was able to follow the manual and "Upload to Yubico" and after this activate the YubiKey in LastPass and it is working perfect.

However i cant update Slot 2 anymore and it also says that Slot 2 is not configured, when i go to "update settings" and change for instance YubiKey(s) protected - Disable protection and click update
i get the message "Yubikey could not be configured. Perhaps protected with configuration protection access code"

How can i configure slot 2 now for use with Symantec VIP credential or some other service?

I never changed the access code.

Solved by contacting Yubico Support Team at support@yubico.com

Because nobody responded yet, i tried solving the problem myself and to make things worse
i found out that i accidentally overwrote my Symantec VIP OATH One-Time Password.

Only to find out that it is impossible to recover.

I made this mistake because apparently i read an outdated blog article (which i cant find anymore) where they were talking about a VIP YubiKey with an older firmware
which had a different setup.

How come you have such bad and outdated documentation about how to configure the new VIP YubiKey with 2.3.3 firmware.
And how is it not possible to see what is programmed at slot 1 and slot 2 in the Personalization Tool?
There should be a standard option in the tool to select slot 1 or slot 2 and see what is programmed OTP or OATH-HOTP etc and also see if the slot it is dormant or not.

Most video's on your http://vimeo.com/yubikey are outdated and the tutorial for using YubiKey with Gmail also (no longer) works because i only have an option when i enable 2-step verification to send me a text message or a voice message and i don't see a Barcode.
I was also send to http://www.yubico.com/totp in a the Gmail video to download the TOTP tool and that page no longer exists

Also the test server is not available after you uploaded a new Yibico OTP mode configuration, it takes you to the webpage http://www.yubico.com/1 which can not be found.

I am not satisfied at all and now i also lost the Symantec Validation and ID protection (VIP)

How can we solve this?

Hello Sir,

We're sorry you've had issues with your VIP YubiKey. We have taken the liberty of shipping you a new VIP YubiKey free of charge.

To address your concerns:

How come you have such bad and outdated documentation about how to configure the new VIP YubiKey with 2.3.3 firmware.
> Yubico.com/vip is the page with the details of the current configuration and warning on overwriting the configs. We continue to update our existing documentation and
> will work to make it clearer.


And how is it not possible to see what is programmed at slot 1 and slot 2 in the Personalization Tool?
> The YubiKey is not designed to be queried as to it's configuration beyond whether slot 1 and/or slot 2 is configured and active.


There should be a standard option in the tool to select slot 1 or slot 2 and see what is programmed OTP or OATH-HOTP etc and also see if the slot it is dormant or not.
> This is not the way the YubiKey works - and is not something we can change in it's current design. But you can activate a slot (with a touch of the button) and see
> what comes out.
> A Yubico OTP will be 44 characters in length, and change each time the button is pressed.
>
> An OATH HOTP will be 6-8 characters in length and consist only of numbers. The numbers will change with each button press.
>
> A Static Password will be the same each time the button is pressed.
>
> A Challenge-Response will not output anything when the button is pressed. The YubiKey Cross-Platform Personalization Tool's Challenge Response tool can be used to > > test the challenge-response mode of a YubiKey


Most video's on your http://vimeo.com/yubikey are outdated and the tutorial for using YubiKey with Gmail also (no longer) works because i only have an option when i enable 2-step verification to send me a text message or a voice message and i don't see a Barcode.
> Google changes their UI very regularly. However, we've taken note of your comment and will plan an update in due course.


I was also send to http://www.yubico.com/totp in a the Gmail video to download the TOTP tool and that page no longer exists
> We cannot reproduce this issue [clicking on the link re-directs to http://www.yubico.com/applications/inte ... ces/gmail/ where the TOTP tool can be accessed].


Also the test server is not available after you uploaded a new Yibico OTP mode configuration, it takes you to the webpage http://www.yubico.com/1 which can not be found.
> We are unable to reproduce this issue as well [Clicking on the link redirects to http://demo.yubico.com/]


I am not satisfied at all and now i also lost the Symantec Validation and ID protection (VIP)
> We understand. We have authorized a new VIP YubiKey which will be sent to you.

_________________
-David Maples
Yubico Senior Solutions Engineer
http://www.Yubico.com

Thanks for the great service!

And the reason why i was not redirected to the correct pages (updated) is because i have a Mozilla Firefox plugin installed named HTTPS Everywhere
and the HTTPS pages do not redirect me to the new pages.

If i go to https://www.yubico.com/totp it stays on the same page displaying a message "404 Not Found!" but if i go to http://www.yubico.com/totp
i am redirected to http://www.yubico.com/applications/inte ... ces/gmail/ as it should.

The same with https://www.yubico.com/1 when u go there using http://www.yubico.com/1 i am redirected to http://demo.yubico.com/