Yubico Forum
https://forum.yubico.com/

[BUG] YubiKey 4 sometimes not found on OS X
https://forum.yubico.com/viewtopic.php?f=35&t=2262
Page 1 of 1

Author:  chrisamin [ Wed Mar 23, 2016 1:47 pm ]
Post subject:  [BUG] YubiKey 4 sometimes not found on OS X

I have been having a problem with Yubico Authenticator on OS X 10.11 where the authenticator stops working at some point. The interface just shows "Insert a YubiKey...". If I reboot my laptop then it works again. Strangely, if I open YubiKey NEO Manager then I can see my device, but there are no "Available apps".

Some debug steps:

$ /Applications/Yubico\ Authenticator.app/Contents/MacOS/yubioath-cli
No YubiKey found!

$ /Applications/YubiKey\ PIV\ Manager.app/Contents/MacOS/yubico-piv-tool -v -a status
error: no useable reader found.
Failed to connect to reader.

$ pgrep scdaemon
$

Author:  ChrisHalos [ Thu Mar 24, 2016 8:33 pm ]
Post subject:  Re: [BUG] YubiKey 4 sometimes not found on OS X

Sounds like the behavior early in the El Capitan release cycle (pre-10.11.2) where the old version of libccid was included in OS X and the patch needed to be run (https://github.com/Yubico/ifd-yubico). If you haven't updated to 10.11.2, that would be my recommendation. If you are past that, you may want to try and install the patch anyway. Libccid is essentially a whitelist for smart card devices, and the older versions of libccid (which were on OS X until 10.11.2 was released) didn't include the the U2F/CCID combination modes.

Another small (and less invasive) test you can run is to open the YubiKey NEO Manager, disable U2F mode, then see if the available apps are shown, and the yubico-piv-tool / yubioath commands you were running work.

Author:  chrisamin [ Tue Apr 12, 2016 12:46 pm ]
Post subject:  Re: [BUG] YubiKey 4 sometimes not found on OS X

I applied the patch just in case (10.11.3), as you said, but the issue still crops up. It doesn't help matters to open the YubiKey NEO Manager and disable U2F mode. Do you have any other ideas for debugging this, as it's quite annoying?

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/