Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 2:41 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 7 posts ] 
Author Message
PostPosted: Sat Apr 26, 2014 1:08 pm 
Offline

Joined: Wed Apr 23, 2014 4:32 pm
Posts: 10
Hi there,

I recognized a possible Problem with the Yubikey Neo and Windows 8.1 (Not sure if it's really a Problem).

When I configure my Yubikey Neo for Login and Restart the Computer the following happens.
If i never plugged in the Neo in a specific USB-Port, and Login with the Yubikey Neo it succeeds.
If i previously already plugged in this Yubikey to an USB-Port once, the Yubikey isn't recognized on Login anymore.

It seems, that, if the device was already installed once in Windows 8.1, it's no longer recognized for challenge Response.
Strange issue.

Any ideas on it?


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Mon Apr 28, 2014 8:25 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Quote:
If i never plugged in the Neo in a specific USB-Port, and Login with the Yubikey Neo it succeeds.
If i previously already plugged in this Yubikey to an USB-Port once, the Yubikey isn't recognized on Login anymore.


Please elaborate this two sentences so that we are able to reproduce the issue.

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Mon Apr 28, 2014 10:04 am 
Offline

Joined: Wed Apr 23, 2014 4:32 pm
Posts: 10
I'll try to.

For example I have 2 USB-Ports on my PC.

I plug in the Neo into the first port (where it has already plugged in once). I can't login, when the authentication with Yubikey ist active.
It just tells me, that I have to plug in the Yubikey to Login.

I plug in the Neo into the second port (where it never has been plugged in before). I can Login, when the authentication with yubikey is active and the Yubikey is recognized.
Now I restart my PC.
I plug in the Neo into the second port again (where it now has already plugged in previously). I can't login anymore with the Yubikey and it's no longer recognized for login.

I hope the description is detailed enough.


Top
 Profile  
Reply with quote  
PostPosted: Mon Apr 28, 2014 10:11 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
It looks more like a Windows problem.

Did you applied this patch already: http://support.microsoft.com/kb/2917929

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Mon Apr 28, 2014 4:37 pm 
Offline

Joined: Wed Apr 23, 2014 4:32 pm
Posts: 10
I've already Windows 8.1 Update 1 with all Patches installed.

Maybe it has something to do with Update 1?


Top
 Profile  
Reply with quote  
PostPosted: Tue Apr 29, 2014 7:57 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Try to install the USB driver from your board manufacturer.

Or using a USB 2.0 hub and see if you notice differences.

My blind opinion of your description is that it is a Windows issue as the NEO either works or doesn't.

_________________
-Tom


Top
 Profile  
Reply with quote  
PostPosted: Tue Apr 29, 2014 3:06 pm 
Offline

Joined: Wed Apr 23, 2014 4:32 pm
Posts: 10
Maybe it has something to do with Windows 8.1 U1 and USB 3.0?
All ports I tested were USB 3.0 Ports.

Edit:

Tried in on a USB 2.0 Hub. Same problem.
I doesn't seem to have something to do with, if the Yubikey was already plugged in once.

If I newly plugin the Yubikey in any port (In all ports the Yubikey was previously plugged in), the first few Login-Atempts won't work.
When I wait a while, at some Point I can Login, without changing anything.


Edit:

I futher troubleshooted this issue. Slowly it Comes clearer.
If the Yubikey Neo is in HID + CCID Mode with Touch Eject, I get above effect (Sometimes the SHA-1 Challange Response works and sometimes it doesn't)
If the Yubikey Neo is in HID Mode it works flawless.


It seems like an issue I described in the Yubikey Neo Forum where I used the TOTP Helper Program and sometimes the TOTP Helper Program worked and sometimes it gave back "Can't read Serial number" or something like that.
It Looks like a General issue with SHA-1 Challenge Response and Mode 82. What do you think? When I'm in CID-Mode both Scenarios work without Problems and every time as Long the Yubikey is recognized.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Heise IT-Markt [Crawler] and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group