This tag should be used for all products provided by the Yubico company, such as Yubikey, a two-factor authentication hardware key.
Questions tagged [yubico]
114 questions
1
vote
0 answers
Source for Yubikey AAGUID Metadata?
I'm looking for a reliable machine-readable source for Yubikey AAGUID values. The most likely-looking source I see is the Yubikey Attestation Metadata, however this seems to be very incomplete. A far more comprehensive list in table form is…

user4294565
- 131
- 5
1
vote
1 answer
Exception from WebAuthn Authentication API with Yubikey
I'm working on adding WebAuthn support to a newly-minted web site and am running into a problem during the navigator.credentials.get() call. The client is Firefox 85.0 on Fedora 33. In case it matters, the server is Apache httpd on Fedora 33. The…

user4294565
- 131
- 5
1
vote
1 answer
What are the Object Attributes needed to generate KeyPairs from YubiKey with PKCS11?
My application wants to sign documents using YubiKey with PIV (PKCS11). I was able to Login to my YubiKey but When I try to generate KeyPairs, it throws this error.
"Method C_GenerateKeyPair returned CKR_ATTRIBUTE_VALUE_INVALID"
This is the code I…

Tharindu Ranaweera
- 11
- 1
1
vote
1 answer
Generate YubiOTP verification HMAC-SHA-1 signatures in Python
I'm a little bit confused by what I need to do here for Python, but from the Yubikey API documentation for verifying Yubikeys that have YubiOTP the HMAC signature needs to be generated a specific way - from their documentation:
Generating…

Thomas Ward
- 2,714
- 7
- 36
- 51
1
vote
1 answer
How to import an existing RSA key into YubiHSM?
I know how to do it in Yubikey, but I have a YubiHSM2. Don't know how to do it.
The following is for Yubikey, not for YubiHSM
$ yubico-piv-tool -a import-key -s 9c -i root.key

GummyBear21
- 1,251
- 2
- 10
- 8
1
vote
1 answer
Why navigator.credentials.get function not working in firefox addon
Calling function navigator.credentials.get({ publicKey }) from background in Firefox addon throws following error The request is not allowed by the user agent or the platform in the current context, possibly because the user denied permission..
I…

Jan Kertis
- 11
- 3
1
vote
3 answers
Two PIV certificates - one YubiKey 5
I'm trying to import two PIV certificates to be used on one Yubico Key 5 (slot 9a).
One certificate for regular use and another for elevated privileges. For the life of me, I can't figure it out!
I've tried using the GUI YubiKey Manager > PIV >…

Noah Whitley
- 11
- 1
1
vote
0 answers
How to generate and access asymmetric key using yubikey 5ci on iOS devices?
Our team is exploring Yubico Mobile iOS SDK: https://github.com/Yubico/yubikit-ios
But we find it impossible to achieve one of our goals here:
We need to generate an asymmetric using Yubikey 5ci and store on it. And we also need it can be referenced…

Johnny Zhao
- 2,858
- 2
- 29
- 26
1
vote
0 answers
Yubico / Credential ID length mis-match between Attestation and Assertion
I am using a Yubico security key with an AAGUID of ff8a011f3-8c0a-4d15-8006-17111f9edc7d (Security Key By Yubico v5.1) to perform password-less authentication for my web application. When I create/register a new credential I use the attribute…

Tiglath
- 11
- 3
1
vote
1 answer
How to sign a message using Yubikey
I'm interested in using a yubikey to sign a message. Im aware that openPGP can be used to sign a message using a yubikey but the signature includes some metadata as described here:…

AidenPetersen
- 13
- 2
1
vote
1 answer
How to enable web app U2F via NFC on mobile
If you attempt to login to github on mobile web, it automatically detects that it's a mobile device and lets you authenticate using a NFC key. I cannot find any documentation for implementing NFC 2FA for mobile web, anyone know how this is…

user1130176
- 1,772
- 1
- 23
- 33
1
vote
1 answer
yubikey not functioning with qutebrowser
I've been using yubikey for a while with chrome, but have recently discovered how much I like using qutebrowser.
Today I was trying to log into github to make a comment and couldn't finish with my yubikey. Github told me something went 'really…

Fred Hockney
- 33
- 1
- 5
1
vote
0 answers
Sign jars with gradle and yubikey
I am trying to sign my jars with yubikey and gradle.
For gradle I am using the signing plugin. Unfortunately I don't get it working with setting it up in the usual way since you have to provide the secring.gpg which should contain the private key as…

questionaire
- 2,475
- 2
- 14
- 28
1
vote
0 answers
FIDO U2F Key: Sign authentication challenge in Chrome returns error code 4 (works in FF)
We are trying to add authentication via Yubico FIDO U2F Security Key to our admin website.
This works in FireFox with the U2F add-on installed but signing a challenge (using javascript) to log in keeps returning {errorCode: 4}.
Does anyone know…

Dean Voets
- 21
- 4
1
vote
0 answers
Is it possible to use yubikey with server AD which is already in sync with Azure AD
I am planning to use Yubikey with my systems. Currently I have my windows server Active directory is configured to synchronize with Microsoft AD services. So if I use Yubikey in my server for 2FA, will it cause any problem with synchronizing of…

botguide
- 129
- 1
- 1
- 10