Yubico Forum
https://forum.yubico.com/

Support for OTP+U2F mode?
https://forum.yubico.com/viewtopic.php?f=26&t=1519
Page 3 of 6

Author:  jskvbinmv3 [ Fri Oct 24, 2014 8:08 am ]
Post subject:  Re: Support for OTP+U2F mode?

ybpp wrote:

To make the udev rules in the github repo work I had to make a small change, modify product id in the rule to "0116". The yubikey product id in the OTP+U2F+CCID mode is "0116" not "116". (ATTRS{idProduct}=="0116").
Now it works ok in Chrome (v39) as u2f, ccid, yubiauth-applet, OTP.

Note: I also have to create plugdev group and add my user to it, as my distro does not have the plugdev group.


This solved it for me. :)

The only thing not working right now is the Yubico Authenticator python app.

Author:  SanderG [ Sun Oct 26, 2014 4:32 pm ]
Post subject:  Re: Support for OTP+U2F mode?

I have enabled mode 6 successfully on OS X Mavericks. Indeed the Personalization Tool does not yet recognize this, it complains that multiple Yubikeys have been inserted.
(btw. I have seen reports from users on Yosemite who would not be able to use that tool.)

It works successfully with both LastPass and Google O2P.

Would it be possible to use it with AuthLite at the same time, or would that require an additional Yubikey?
Perhaps there is documentation on which combinations are possible and which are not. I'm new to the Yubikey (first post!) and always looking to build a business case around this.

Author:  digininja [ Wed Oct 29, 2014 12:19 am ]
Post subject:  Re: Support for OTP+U2F mode?

dain wrote:
This is strictly an intended limitation in the YubiKey NEO Manager, which is very likely to be removed in the near future. The reason is that current FIDO clients don't support these modes (both U2F and OTP enabled at the same time) correctly, and thus the mode becomes quite useless. Once these problems have been fixed, a new version of the NEO Manager will be released which doesn't impose this limitation.


Where will you be announcing the new version?

Author:  jrappard [ Wed Oct 29, 2014 10:23 pm ]
Post subject:  Re: Support for OTP+U2F mode?

Hi,

Got it to work through the './ykpersonalize -m6' on Maverick with Chrome 39 Beta as well!

Great stuff ;-)

Jaspser

Author:  Patschi [ Mon Nov 03, 2014 11:38 pm ]
Post subject:  Re: Support for OTP+U2F mode?

Hello,

I have activated the mode 6 some days ago on my Yubikey NEO Nano and all modes are activated according to Yubikey NEO Manager... But sadly U2F is not working as expected - my operating system is Windows 8.1 x64. When I try to use the U2F demo and press the button on the Yubikey nothing happens. When I press the button in a text field the key is putting in the OTP correctly.

Regards,
Patrik

Author:  SanderG [ Mon Nov 10, 2014 4:32 pm ]
Post subject:  Re: Support for OTP+U2F mode?

Patschi wrote:
I have activated the mode 6 some days ago on my Yubikey NEO Nano and all modes are activated according to Yubikey NEO Manager... But sadly U2F is not working as expected - my operating system is Windows 8.1 x64. When I try to use the U2F demo and press the button on the Yubikey nothing happens. When I press the button in a text field the key is putting in the OTP correctly.

You did not mention if you are using Chrome 39 [beta]?

Author:  Patschi [ Tue Nov 11, 2014 5:42 pm ]
Post subject:  Re: Support for OTP+U2F mode?

I'm currently using Chrome v38 with the recommended extension by Yubico, so I thought it should also work on the stable one. Does this really only work v39?

Author:  dpeters11 [ Wed Nov 12, 2014 6:50 pm ]
Post subject:  Re: Support for OTP+U2F mode?

Patschi wrote:
I'm currently using Chrome v38 with the recommended extension by Yubico, so I thought it should also work on the stable one. Does this really only work v39?


Correct, Chrome 39 is the one that supports both modes being enabled simultaneously.

Author:  droctogon [ Tue Nov 18, 2014 8:51 pm ]
Post subject:  Re: Support for OTP+U2F mode?

dpeters11 wrote:
Patschi wrote:
I'm currently using Chrome v38 with the recommended extension by Yubico, so I thought it should also work on the stable one. Does this really only work v39?


Correct, Chrome 39 is the one that supports both modes being enabled simultaneously.


Chrome v39 stable was just released to the masses, specifically 39.0.2171.65 (64-bit).
I wasn't able to find any reference to FIDO or U2F in the Chromium changelog for this release as compared to an arbitrary v38 release:
https://chromium.googlesource.com/chromium/src/+log/a4033fa68ed3a84019ed1b2cbcd9289b14c153d0..b853bfefba0da840f4574eb3b5c7ad6e9b8573b5/?pretty=full&s=c130d99551dbef05e6a95641585cd31b882b6147

Latest Yubico-Neo-Manager release is 0.2.5, and it's still preventing OTP + U2F simultaneous modes. I hope the next release will include this functionality, whenever that will be.

Author:  Patschi [ Tue Nov 18, 2014 9:11 pm ]
Post subject:  Re: Support for OTP+U2F mode?

I updated my Chrome to v39 right now: OTP and U2F are both activated and are working fine together! :)

Page 3 of 6 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/