Yubico Forum
https://forum.yubico.com/

Neo with PGP + Yubi-OTP + U2F?
https://forum.yubico.com/viewtopic.php?f=26&t=1996
Page 1 of 1

Author:  Abshole [ Fri Aug 14, 2015 3:31 am ]
Post subject:  Neo with PGP + Yubi-OTP + U2F?

Hi there,

I've currently got my YubiKey Neo configured (and working) with Yubi's OTP, as well as PGP Smartcard. When I enabled the U2F however, the PGP smartcard appears to no longer be detected (at least on my Linux box - haven't found a windows machine to try yet). Fido U2F works properly when this happens, however. Disabled U2F seems to make the PGP smartcard available again, so it's not wiping config or anything. Is there some feature whereby these two are mutually exclusive? I'd love to be able to utilise all of them :) dmesg show the same ID's + messages both before and after this change, by the way.

Any help or suggestions are much appreciated. Let me know if more info is needed!

Author:  Tom2 [ Thu Aug 20, 2015 10:18 am ]
Post subject:  Re: Neo with PGP + Yubi-OTP + U2F?

Do you have the NEO manager installed?


sudo sh -c 'wget -q -O - https://raw.githubusercontent.com/Yubic ... -ccid-udev | python'

Author:  Abshole [ Fri Aug 21, 2015 12:48 am ]
Post subject:  Re: Neo with PGP + Yubi-OTP + U2F?

Hi Tom,

I do, yes, however I still encounter this issue. Thanks for your time nonetheless

Author:  Tom2 [ Fri Aug 21, 2015 2:46 pm ]
Post subject:  Re: Neo with PGP + Yubi-OTP + U2F?

Looks like a Udev problem.

did you do this?

edit /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora.

KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120"

copy udev rule for yubikeys

cp /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/

then added the new product strings to to so line 7 reads,

ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \

Author:  Abshole [ Wed Aug 26, 2015 2:32 am ]
Post subject:  Re: Neo with PGP + Yubi-OTP + U2F?

Hi Tom2,

Yes, I have had those udev rules set up as stated. That was one of the initial things I did when getting the Yubi to work for other operations. Thanks

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/