Yubico Forum

What if anything should be done to counter the implications of the HeartBleed OpenSSL Vulnerability on the security of our use of Yubikeys in our Organisation?

What are the potential compromises?
What should be done to regain security?

All our services have been patched plus:
http://status.yubico.com/2014/04/10/yub ... eartbleed/

_________________
-Tom

Have the SSL certificates been re-issued for all affected services?

Also, was there any chance of the private keys for the Yubikey getting compromised?

Edit: I mean the private keys stored on Yubico's servers used to decrypt the OTP.

Hello,

Everything was re-keyd

Because of how the YubiCloud works no secrets are ever exposed to such kind of threats (read documentation)

No action is required from Yubico's users side.

_________________
-Tom

Given what a big deal HeartBleed is I'm surprised the post you link to has not been updated with the confirmation that certificates were reissued but that there is no need for YubiKey user action.