Yubico Forum
https://forum.yubico.com/

[QUESTION] How do I use PKCS#11 keygenerate on Neo?
https://forum.yubico.com/viewtopic.php?f=26&t=1782
Page 1 of 1

Author:  jpmens [ Wed Mar 11, 2015 1:04 pm ]
Post subject:  [QUESTION] How do I use PKCS#11 keygenerate on Neo?

Hello, I have a Yubikey Neo with firmware v3.3.0 configured with -m82 (OTP and CCID), and I want to use some code which utilizes the PKCS#11 interface to the smart card.

When I attempt to do so, I get an error as shown here:

Code:
pkcs11-tool --module=/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so --pin 123456 --keypairgen --key-type rsa:1024 --label 'jp1' --id 1
Using slot 2 with a present token (0x5)
error: PKCS11 function C_GenerateKeyPair failed: rv = CKR_FUNCTION_NOT_SUPPORTED (0x54)


What do I have to set on the Neo to be able to accomplish this?

Thanks.

Author:  Uriel [ Thu Mar 12, 2015 10:04 pm ]
Post subject:  Re: [QUESTION] How do I use PKCS#11 keygenerate on Neo?

I would probably start with generating keys via yubico-piv-tool rather than pkcs11-tool.

Author:  jpmens [ Sat Mar 14, 2015 12:46 pm ]
Post subject:  Re: [QUESTION] How do I use PKCS#11 keygenerate on Neo?

That wouldn't help, as the software I want to use needs to generate it's keys via the PKCS#11 interface.
The question I'm basically asking is: is this at all possible with the Yubikey Neo?

(FWIW, using the piv-tool works.)

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/