Yubico Forum
https://forum.yubico.com/

windows 10 1703 minidriver update breaks PIV
https://forum.yubico.com/viewtopic.php?f=26&t=2739
Page 4 of 4

Author:  My1 [ Wed Dec 06, 2017 12:41 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

oderbang wrote:
Hi I can also confirm this issue
Certificate are issued via the PIV manager or CSIS Enrollment Station

we recently had all the Yubikey replaced due to the weak crypto issue. (just 2 months ago) we have now started to see odd laptop remote user having this issue.
I can confirm uninstalling the mini driver from "Apps & features" and Device manager resolves the issue.

But as the driver is auto pushed (we are not blocking it) is there anyway to find out exactly what is wrong with the new driver/setup

as said in one announement post, The new Driver by Yubi uses a different format for the storage which doesnt rely on the original slots anymore, this removes cross-compatibility because the new system probably doesnt work everwhere, but also has benefits like using multiple certs of the same type and more certs in general.

although it would really have helped if the PIV Manager would have allowed to 1) store the certs in the new container format and 2) make the mappings towards the slots so you can select which certs out of that container can be also used as slots.

Author:  irweazel [ Mon Dec 18, 2017 9:19 am ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

does that mean the smart card certs need to be regenerated/reinstalled on the yubikey?
Has anyone else tried this?

just removing the Minidriver seem to solve the issue, no need to roll back the driver from "Yubikey Smart Card" to generic PIV NIST driver

Author:  maggis [ Wed Jan 17, 2018 10:47 am ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

Hit by this as well.

Does anyone know the exact update name so I can un-approve it from WSUS?

I would prefer to not blacklist the device ID since some complained that the device did not work after that.

Does anyone know does OpenSC support the new "container" on-card format or will it be supported?

Page 4 of 4 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/