Yubico Forum

I am a new Yubikey-owner and -user, and as part of my IT consulting work am checking the possibilities for using Yubikeys in Windows AD environments. I have read several technical documents about AuthLite, but am actually wondering if the Yubikey NEO can be used in connection with Active Directory Certificate Services (AD CS) since the NEO includes smartcard/PKI functionality? Will there always be the need for some form of "middleware"? I am still learning about the different pieces needed for a two-factor authentication in AD, feel free to point me in the right direction...

Thanks for reading and best regards
Maurice Wörnhard

Hello there,

The NEO itself has a PKI co-processor so we can support PKI operations, but a suitable Javacard applet has to be loaded to support the desired functionality.

CCID mode - the NEO can act in three modes, see
http://www.yubico.com/2012/12/yubikey-n ... te-device/

NFC - phone is just receiver at that end, all secrets are stored in the NEO.

_________________
-Tom