For a few weeks I've been thinking about how to sell the Yubikey to an enterprise (specifically the one I work for). One challenge I see is the lack of a "enterprise grade" authentication server. What I mean by that is redundant systems so that if a auth server were to crash, or a facility where one is housed were to become unavailable, there would still be one or more backup authentication server available. Further, if anything were to go wrong with the server, there is an expectation that we have a support contract with the vendor.

So that leads to this question: would it be easier to modify the Yubico validation server to support multiple servers, replicated back end data, load balancing and to provide support contracts, or to release a new Yubikey OATH model that can use an existing "enterprise" OATH server? While the OATH authentication server market doesn't appear to be crowed, I think I've found one or two that attempt to meet those requirements.