Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 8:28 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 6 posts ] 
Author Message
PostPosted: Wed Jul 15, 2015 9:59 am 
Offline

Joined: Tue Jul 14, 2015 1:09 pm
Posts: 3
I have an older Yubikey Neo with firmware 3.1.2. Connection mode is set to OTP+CCID. I'm trying to
get it set up for use with ssh following the instructions here:

http://www.jupiterbroadcasting.com/8506 ... y-las-373/

opensc-tool seems to see the Neo fine:
Code:
robertm@Sys76:~$ opensc-tool --list-readers
# Detected readers (pcsc)
Nr.  Card  Features  Name
0    Yes             Yubico Yubikey NEO OTP+CCID 00 00

pcsc-scan seems to see the Neo:
Code:
robertm@Sys76:~$ pcsc_scan
PC/SC device scanner
V 1.4.23 (c) 2001-2011, Ludovic Rousseau <ludovic.rousseau@free.fr>
Compiled with PC/SC lite version: 1.8.11
Using reader plug'n play mechanism
Scanning present readers...
0: Yubico Yubikey NEO OTP+CCID 00 00

Tue Jul 14 05:19:00 2015
Reader 0: Yubico Yubikey NEO OTP+CCID 00 00
  Card state: Card inserted,
  ATR: 3B FA 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 4E 45 4F A6

ATR: 3B FA 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 4E 45 4F A6
+ TS = 3B --> Direct Convention
+ T0 = FA, Y(1): 1111, K: 10 (historical bytes)
  TA(1) = 13 --> Fi=372, Di=4, 93 cycles/ETU
    43010 bits/s at 4 MHz, fMax for Fi = 5 MHz => 53763 bits/s
  TB(1) = 00 --> VPP is not electrically connected
  TC(1) = 00 --> Extra guard time: 0
  TD(1) = 81 --> Y(i+1) = 1000, Protocol T = 1
-----
  TD(2) = 31 --> Y(i+1) = 0011, Protocol T = 1
-----
  TA(3) = FE --> IFSC: 254
  TB(3) = 15 --> Block Waiting Integer: 1 - Character Waiting Integer: 5
+ Historical bytes: 59 75 62 69 6B 65 79 4E 45 4F
  Category indicator byte: 59 (proprietary format)
+ TCK = A6 (correct checksum)

Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):
3B FA 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 4E 45 4F A6
   Yubikey NEO

And here is the ykinfo:
Code:
robertm@Sys76:~$ ykinfo -a
serial: 2101626
serial_hex: 20117a
serial_modhex: dcbbil
version: 3.1.2
touch_level: 1541
programming_sequence: 1
slot1_status: 1
slot2_status: 0
vendor_id: 1050
product_id: 111

So here is the problem. When I run:
Code:
robertm@Sys76:~$ yubico-piv-tool -s 9a -a generate -o public.pem
Failed to connect to reader.

robertm@Sys76:~$ yubico-piv-tool -a status
Failed to connect to reader.

You can see the error. I'm stumped ... after 8+ hours of googling. Could this be due to my Neo's aging firmware or a misconfigured Linux box? I'm running a fairly stock Ubuntu Mate 15.04 (64-bit) system. Any help is appreciated.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Jul 15, 2015 2:02 pm 
Offline
Site Admin
Site Admin

Joined: Mon Dec 08, 2014 2:52 pm
Posts: 314
What does the NEO manager says ?


Top
 Profile  
Reply with quote  
PostPosted: Thu Jul 16, 2015 10:28 am 
Offline

Joined: Tue Jul 14, 2015 1:09 pm
Posts: 3
Neo Manager says:


Attachments:
Screenshot-YubiKey NEO Manager (1.2.1).png
Screenshot-YubiKey NEO Manager (1.2.1).png [ 44.66 KiB | Viewed 3855 times ]
Top
 Profile  
Reply with quote  
PostPosted: Thu Jul 16, 2015 10:35 am 
Offline
Site Admin
Site Admin

Joined: Mon Dec 08, 2014 2:52 pm
Posts: 314
Yes, so you have no PIV applet. You NEO is years old, there was no support for PIV yet.

Is your device a development device?


Top
 Profile  
Reply with quote  
PostPosted: Thu Jul 16, 2015 12:52 pm 
Offline

Joined: Tue Jul 14, 2015 1:09 pm
Posts: 3
It's not a development unit. Just old. I bought it to replace my original non-Neo Yubikey shortly after the Neo line was announced.


Top
 Profile  
Reply with quote  
PostPosted: Thu Jul 16, 2015 7:49 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
Hey rmeineke, I'd be happy to buy that Neo off of you so that you can buy yourself a shiny new one.

PM me if you are interested. I'd love to get my hands on a ykneo with known card management keys.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Heise IT-Markt [Crawler] and 8 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group