Yubico Forum

I tried to change the PINs on a fresh NEO, but was confused what the message "Conditions of use not satisfied" means when trying to set the PIN/Admin PIN, and an additional fat-fingered PIN entry means I'm no longer able to use the OpenPGP functionality:



I thought these PINs would be possible to change from the PIV tools, but alas, yubico-piv-tool seems to manage a completely different set of PINs, not the ones shown above. Even if I change the PINs by yubic-piv-tool and/or reset the PIV applet, these counters don't seem to change.

The first seem to be the PIN retry, and the third is the admin PIN, but the second doesn't seem to change.

I also thought I would then need to reset everything in the OpenPGP applet (no big deal, as I have no private keys on it yet), but it seems to be this card is now too new to allow us mere mortals to upload new applets (Version 3.3.0)

So is it somehow possible to reset the PIN codes with this version?

Please, follow available documentation here:
https://developers.yubico.com/ykneo-ope ... pplet.html

_________________
-Tom

Thank you - I missed those instructions apparently. They seemed to work, sort of, everything produced the appropriate output (it was showing version 1.0.7). However, now I can see even less of the OpenPGP functionality. After removing and reinserting the NEO, nothing related to OpenPGP seem to work:



Without the agent running, it's just as scary:



Apart from that, it's working all right, except for the PGP part.



The windows NEO manager application says the OpenPGP applet is installed, but without any version shown. Can this still be restored somehow?

Chexum.

Please contact support here: https://www.yubico.com/support/raise-ticket/

And refer them to this post, you are experiencing a known bug present of few versions of the 1.0.7 applet with the reset command.

Yubico apologize for the inconvenience.

Best Regards,
Tom.

_________________
-Tom

Thank you Tom!

So as a summary, with versions before 1.0.8 (with NEOs 3.3+), it's probably not advised to use the ResetApplet procedures, and I should be much more careful with the Admin PIN, as it can only be fixed by replacement.

Embarrassing for me, but the support from this forum is very good, thanks again!

Hello,

it is just on version 1.0.7

You are welcome!

_________________
-Tom