Yubico Forum

Hello,

I am trying to sign emails in Thunderbird under Linux/Windows using a S/MIME certificate stored on my Yubikey NEO via the PIV Manager tool. As far as I understand it, I need to load an additional vendor specific PKCS#11 module into Thunderbird so that it can access the certificate on the Yubikey instead of looking for installed ones on my computer. Where can I find it or is there some kind of generic module to use (is that OpenSC?)?

Thanks a lot,
Gerhard

Install OpenSC, then load the OpenSC PKCS11 module into Thunderbird (on Windows it's C:\Windows\System32\opensc-pkcs11.dll - or if you're using 32 bit client applications on a 64 bit OS, you must install the 32 bit version of OpenSC and use C:\Windows\SysWOW64\opensc-pkcs11.dll). At that point, you should be able to use certificates in the PIV applet on your NEO.

Hi David,

thanks for the hints, it's working perfectly now! On my Linux I used /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so, for Windows I had to install the 32 bit version of OpenSC indeed because (at least in my language) there is only a 32 bit version of Thunderbird available (didn't know that).

Thanks and have a nice day,
Gerhard