Yubico Forum
https://forum.yubico.com/

[S!] My YubiKey doesn't work on Google and PIV is inconsiste
https://forum.yubico.com/viewtopic.php?f=26&t=1860
Page 1 of 1

Author:  dvel2574 [ Tue Apr 28, 2015 1:22 pm ]
Post subject:  [S!] My YubiKey doesn't work on Google and PIV is inconsiste

So here is what I've done so far in regards to my YubiKey. I configured it for Google and it worked at first. Then I created an HMAC key in Slot 2 and configured it for Windows Local Login. Then I enable the smart card mode and installed PGP certs. Then I installed StartSSL certs using the PIV tool.

So far...

Google Login no longer worked with YubiKey
Windows Login still worked (Thankfully)
The SmartSSL certs are in consistent. I have to keep pressing the button in hopes that it works. Sometimes it works sometimes it doesn't.

I think I've provided as much information as possible. Please let me know if there is any other question that can help you help me. But ultimately I'd like the Google Login to work again with my YubiKey and I'd like it if everytime I plugged in the YubiKey Windows would recognize it as a card reader.

Author:  dvel2574 [ Thu May 07, 2015 1:17 pm ]
Post subject:  Re: [S!] My YubiKey doesn't work on Google and PIV is incons

I appreciate all the help. Who would have known that after a week the answer was so simple that someone who knows about the product could have answered it in less than a week. Yubikey Neo has modes. Something that is not mentioned in the PGP article that tells me to put it into -m82 but doesn't explain that it would disable U2F function. Maybe if an article is going to be written up asking to make changes like -m82 it would be nice to point out what -m82 does and what other options are out there instead of assuming the reader knows what -m82 means. Granted I love this product but the support and the documentation suck!

The solution: is to set the mode to U2F/OTP/CCID with the Eject Flag set using -m86 with ykpersonalize.

Reference after stumbling upon them by accident:
https://www.yubico.com/2012/12/yubikey-neo-openpgp/
https://developers.yubico.com/libu2f-ho ... y_NEO.html
https://www.yubico.com/2012/12/yubikey- ... te-device/

Author:  darco [ Sat May 16, 2015 8:30 pm ]
Post subject:  Re: [S!] My YubiKey doesn't work on Google and PIV is incons

Does the eject flag really do anything on more recent versions of the Yubikey NEO firmware?

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/