Yubico Forum
https://forum.yubico.com/

[QUESTION] Use Personalization Tools to duplicate keys?
https://forum.yubico.com/viewtopic.php?f=30&t=1190
Page 1 of 1

Author:  Tozz [ Wed Oct 09, 2013 2:51 pm ]
Post subject:  [QUESTION] Use Personalization Tools to duplicate keys?

I just received a couple of Yubikeys, and would like to implement them on some websites. I was wondering if I can use multiple keys and duplicate them (change the hex code) using the Personalization Tool.

What I want to achieve is having 3 Yubico keys (1 in my workstation, 1 in my laptop and one on my key chain) and be able to use either one of them to authenticate as it is only 1 key I am using.
Can someone confirm this can be done?

Author:  Tom [ Wed Oct 09, 2013 3:03 pm ]
Post subject:  Re: [QUESTION] Use Personalization Tools to duplicate keys?

Hello,

You can program different Yubikeys with the same values, just plug in a different Yubikey and press the write button on the personalization tool.

Author:  Tozz [ Sat Oct 12, 2013 10:21 pm ]
Post subject:  Re: [QUESTION] Use Personalization Tools to duplicate keys?

I got my additional Yubico keys and I tried your solution, but I am having problems authentication to the demo server.

When I enter a OTP with Key #1, and then try the demo again with Key #2 I get 'REPLAYED_OTP'.

Any ideas what I might be doing wrong?

Author:  Tom [ Mon Oct 14, 2013 5:56 pm ]
Post subject:  Re: [QUESTION] Use Personalization Tools to duplicate keys?

Yes,

If you are using Yubico OTP, then that is not the right approach.

Your second Yubikey is not in sync with the first, therefore you will be sending an old OTP and receive a replyed _ otp error because the counter was not increased.

What you need to do is add to your service a second Yubikey, by adding the public_id of your second Yubikey among your "allowed" devices.

username: test
Yubikey 1: ccccccbjjhhh
Yubikey 2: cccccctheinc
Yubikey 3: ...
etc

Author:  drohm [ Sun Oct 26, 2014 7:45 am ]
Post subject:  Re: [QUESTION] Use Personalization Tools to duplicate keys?

Tom wrote:
Hello,

You can program different Yubikeys with the same values, just plug in a different Yubikey and press the write button on the personalization tool.


Tom,
Could you explain in detail how one would go about doing this? I'm currently using a NEO and I'd like my secondary NEO to serve as a backup in case I lose my main one. I'm currently using it for Google, MS, GitHub, Dropbox with 2-facter auth.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/