Yubico Forum
https://forum.yubico.com/

[Question] why is my Yubikey not fully recognized (debian)
https://forum.yubico.com/viewtopic.php?f=35&t=2362		 Page 1 of 1
Author:  ulrich [ Thu Jul 07, 2016 4:48 pm ]
Post subject:  [Question] why is my Yubikey not fully recognized (debian)
Hello everyone,

I got my new Yubikey 4 and ran into some problems. The LED flashed only once and doesn't light after that. Pressing the button results in a OTP shown in the current program like the terminal. But I can't get access to other functions like the gpg support of the key. I read the manual but this LED behavior is not described in it.
Edit: Also I can't activate it as a U2F in github. Github tells me
Quote:
This device cannot be registered.


sudo ykpersonalize returns
Code:
Yubikey core error: no yubikey present

The gui doesn't find it also. I guess it is a problem with the key and not the software, because the LED doesn't show anything. The only strange thing I could find is the line
Code:
ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
in the output from dmesg. But I don't know if it is important.

Has anyone an idea?

Kind regards,
Ulrich


Here are some more infos:
Yubikey: Version 4
OS: Debian Jessie
Personalization Tool (gui): 3.1.25 (from git)
Library: 1.16.0
Personalization Tool (cli): 1.16.0-1 (debian package)

Output from dmesg:
Code:
usb 3-2: New USB device found, idVendor=1050, idProduct=0407
usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
usb 3-2: Product: Yubikey 4 OTP+U2F+CCID
usb 3-2: Manufacturer: Yubico
usb 3-2: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
input: Yubico Yubikey 4 OTP+U2F+CCID as /devices/pci0000:00/0000:00:14.0/usb3/3-2/3-2:1.0/0003:1050:0407.0010/input/input137
hid-generic 0003:1050:0407.0010: input,hidraw0: USB HID v1.10 Keyboard [Yubico Yubikey 4 OTP+U2F+CCID] on usb-0000:00:14.0-2/input0
hid-generic 0003:1050:0407.0011: hiddev0,hidraw1: USB HID v1.10 Device [Yubico Yubikey 4 OTP+U2F+CCID] on usb-0000:00:14.0-2/input1


Output from lsusb:
Code:
Bus 003 Device 011: ID 1050:0407 Yubico.com


Output from sudo lsusb -v -s 003:011:
Code:
Bus 003 Device 011: ID 1050:0407 Yubico.com
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x1050 Yubico.com
  idProduct          0x0407
  bcdDevice            4.31
  iManufacturer           1 Yubico
  iProduct                2 Yubikey 4 OTP+U2F+CCID
  iSerial                 0
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength          150
    bNumInterfaces          3
    bConfigurationValue     1
    iConfiguration          0
    bmAttributes         0x80
      (Bus Powered)
    MaxPower               30mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           1
      bInterfaceClass         3 Human Interface Device
      bInterfaceSubClass      1 Boot Interface Subclass
      bInterfaceProtocol      1 Keyboard
      iInterface              0
        HID Device Descriptor:
          bLength                 9
          bDescriptorType        33
          bcdHID               1.10
          bCountryCode            0 Not supported
          bNumDescriptors         1
          bDescriptorType        34 Report
          wDescriptorLength      71
         Report Descriptors:
           ** UNAVAILABLE **
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0008  1x 8 bytes
        bInterval              10
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         3 Human Interface Device
      bInterfaceSubClass      0 No Subclass
      bInterfaceProtocol      0 None
      iInterface              0
        HID Device Descriptor:
          bLength                 9
          bDescriptorType        33
          bcdHID               1.10
          bCountryCode            0 Not supported
          bNumDescriptors         1
          bDescriptorType        34 Report
          wDescriptorLength      34
         Report Descriptors:
           ** UNAVAILABLE **
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x04  EP 4 OUT
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               2
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x84  EP 4 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               2
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        2
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass        11 Chip/SmartCard
      bInterfaceSubClass      0
      bInterfaceProtocol      0
      iInterface              0
      ChipCard Interface Descriptor:
        bLength                54
        bDescriptorType        33
        bcdCCID              1.00
        nMaxSlotIndex           0
        bVoltageSupport         7  5.0V 3.0V 1.8V
        dwProtocols             2  T=1
        dwDefaultClock       4000
        dwMaxiumumClock      4000
        bNumClockSupported      0
        dwDataRate         307200 bps
        dwMaxDataRate      307200 bps
        bNumDataRatesSupp.      0
        dwMaxIFSD            2038
        dwSyncProtocols  00000000
        dwMechanical     00000000
        dwFeatures       000400FE
          Auto configuration based on ATR
          Auto activation on insert
          Auto voltage selection
          Auto clock change
          Auto baud rate change
          Auto parameter negotation made by CCID
          Short and extended APDU level exchange
        dwMaxCCIDMsgLen      3072
        bClassGetResponse    echo
        bClassEnvelope       echo
        wlcdLayout           none
        bPINSupport             0
        bMaxCCIDBusySlots       1
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x82  EP 2 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0008  1x 8 bytes
        bInterval              32
Device Status:     0x0000
  (Bus Powered)
Author:  KristopherKram [ Sun Jul 31, 2016 9:57 am ]
Post subject:  Re: [Question] why is my Yubikey not fully recognized (debia
Having the same issue on CentOS 7.2 and RHEL Workstation. The yubikey NEO works fine on both systems but the yubikey 4 is unrecognized on both systems. Both keys work fine in Windows although.
Author:  KristopherKram [ Wed Aug 17, 2016 5:20 pm ]
Post subject:  Re: [Question] why is my Yubikey not fully recognized (debia
Made some progress turns out you will need to defined the card in /usr/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist. This will allow you to show the slots on the card using yubico-piv-tool -a status. I'm still not able to generate a certificate on the yubikey though.

After resetting the yubikey I'm able to generate certificates and use it like my Yubikey (3?) Neo which works flawlessly.
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/