Yubico Forum

OK, just received and having a few issues:

1. There are no instructions on how to install the Neo Manager software in Linux... there is a link:
https://www.yubico.com/wp-content/uploa ... ey-NEO.pdf

and you download the files and look at the readme, it doesn't say what to do. So, I installed the windows version to activate.

2. After that, it basically doesn't work. I run through the demo:
http://demo.yubico.com/start/u2f/neo

plug in the yubikey, there isn't a solid light. Nothing. When I try the demo, it blinks a very slow, rapid blink. I get the annoying message from chrome do
I want Yubikey to access my securty keys. I press Allow.

I see this message:
{"challenge": "ymsTWIXA1Ibtx6xVsC8hnBHOyxcmc5GNge27I0YdbPo", "version": "U2F_V2", "appId": "http://demo.yubico.com"}

I press the button on the yubikey, nothing happens and finally get this message:
Traceback (most recent call last):
File "/root/python-u2flib-server-demo/examples/yubiauth_server.py", line 130, in __call__
raise Exception("FIDO Client error: %s" % error)
Exception: FIDO Client error: 5 (TIMEOUT)

Is this working for anybody?

I'm using Chrome: Version 40.0.2194.2 dev (64-bit)
FIDO U2F (Universal 2nd Factor) extension 0.8.68.2

Sounds a lot like what I am getting when trying U2F in Ubuntu. (viewtopic.php?f=26&t=1532)

I managed to use U2F when running Chrome as root but I'm not so much into messing around with the system... so if you find a way around this let me know.

Thanks for the comment. I also have a Windows 7 machine running in Virtual Box. Same issue... so it isn't just Linux.

I think it is some usb permission thing in Linux causing this. I am not sure how this would also have effect on Windows running in a VM on Linux.

Concerning your issue configuring the yubikey:

You can find the personalization tool here: http://yubico.github.io/yubikey-persona ... eases.html
and the manpage here: http://yubico.github.io/yubikey-persona ... ize.1.html

What Yubikey you have NEO or Security KEY ?

Did you unlock your Yubikey to enable u2f?
https://www.yubico.com/wp-content/uploa ... ey-NEO.pdf

Is your Yubikey in MODE 3?

If it is a Blue Security Key, please contact
https://www.yubico.com/support/raise-ticket/

_________________
-Tom

I have both. Below is the output from dmesg. As you can see, the Neo has MODE 3 enabled. I get the same result from both. I'll open a ticket.

[75938.244547] usb 7-2: new full-speed USB device number 22 using ohci-pci
[75938.399533] usb 7-2: New USB device found, idVendor=1050, idProduct=0115
[75938.399541] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[75938.399545] usb 7-2: Product: Yubikey NEO U2F+CCID
[75938.399549] usb 7-2: Manufacturer: Yubico
[75938.407607] hid-generic 0003:1050:0115.001E: hiddev0,hidraw5: USB HID v1.10 Device [Yubico Yubikey NEO U2F+CCID] on usb-0000:00:16.0-2/input0
[76050.877454] usb 7-2: USB disconnect, device number 22
[76056.277190] usb 7-2: new full-speed USB device number 23 using ohci-pci
[76056.432105] usb 7-2: New USB device found, idVendor=1050, idProduct=0120
[76056.432112] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[76056.432117] usb 7-2: Product: Security Key by Yubico
[76056.432120] usb 7-2: Manufacturer: Yubico
[76056.440258] hid-generic 0003:1050:0120.001F: hiddev0,hidraw5: USB HID v1.10 Device [Yubico Security Key by Yubico] on usb-0000:00:16.0-2/input0

You will need a new udev rule for the u2f device

https://github.com/Yubico/libu2f-host/b ... -u2f.rules

dump this into:
/etc/udev/rules.d/

_________________
-Tom

Tom,

I created a file called 70-u2f.rules and put it into the directory /etc/udev/rules.d

Rebooted the system

Tried again with both keys, same results.

I also found this bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1155826

It is a request to review the package libu2f for Fedora. I went ahead and built it for my system and installed both libu2f and u2f-hosts. Didn't seem to have any effect.

So did I, as you told me over here. Downloaded the file and put it into /etc/udev/rules.d/ . No effect. U2F is still possible for root only.

I've got the ppa added to the repositories and installed the personalization tools from there.

Edit: I am sorry. This did in fact solve part of the problem. It works in U2F Mode now. However having HID, CCID and U2F activated it still does not. (chrome beta 39.0xx)