Yubico Forum
https://forum.yubico.com/

[SOLVED] - What can be programmed in each slot.
https://forum.yubico.com/viewtopic.php?f=26&t=2784
Page 1 of 1

Author:  Anaglypta [ Wed Nov 15, 2017 6:04 pm ]
Post subject:  [SOLVED] - What can be programmed in each slot.

Hello all,

New user here so please forgive me if this has been asked before.

I have a Ubikey NEO and as supplied, this comes pre provisioned with OTP configured in slot one.

I have used authenticator to create some credentials. Where are these stored on the NEO - do they occupy space in one or other of the two slots, or somewhere completely separate?

How many protocols can be programmed in each slot. I'm guessing that in slot one which has the OTP pre programmed, that I can also set up Challenge-Response and Oath-HOTP but not Static Password as that would require a button push already being used by OTP, so Static Password would need to be programmed in slot 2 to work with a long button push?

Hope this makes sense.

John.

Author:  ChrisHalos [ Thu Nov 16, 2017 1:58 am ]
Post subject:  Re: [Question] - What can be programmed in each slot.

Yubico Authenticator credentials are stored on the OATH applet, not in the slots, unless you change the setting in Yubico Authenticator to store in the slots.

Use the YubiKey Personalization Tool or the YubiKey Manager to see what kind of credentials can be programmed in the slots.

Author:  Anaglypta [ Thu Nov 16, 2017 4:24 pm ]
Post subject:  Re: [Question] - What can be programmed in each slot.

Many thanks Chris,

Just to be certain, and so there is no doubt:-

You can programme one, and one only of Yubico OTP, OATH-HOTP, Static Password, or Challenge-Response in each of the two slots?

And in addition to the above, the key will also store Authenticator credentials, PGP Keys, Smart Card, and PIV certificates/credentials?

Thanks

John.

Author:  ChrisHalos [ Thu Nov 16, 2017 7:30 pm ]
Post subject:  Re: [Question] - What can be programmed in each slot.

Yes, my only correction would be "smart card". The smart card functionality (also referred to as CCID) includes three separate applets - OpenPGP, OATH (Yubico Authenticator), and PIV. When people say "smart card" when discussing the YubiKey, smart card typically = PIV.

Author:  Anaglypta [ Thu Nov 16, 2017 8:49 pm ]
Post subject:  Re: [SOLVED] - What can be programmed in each slot.

Many thanks Chris,

I now understand exactly what I can do with the key - For clarity I've marked this question as [SOLVED].

John

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/