This tag should be used for all products provided by the Yubico company, such as Yubikey, a two-factor authentication hardware key.
Questions tagged [yubico]
114 questions
0
votes
0 answers
How to retrieve Yubikey's model with a NFC connection
My Android application connects to a Yubikey using NFC and create a PivSession:
yubiKitManager.startNfcDiscovery(new NfcConfiguration(), this, device -> {
if (device.isYubiKey()) {
SmartCardConnection connection;
try {
…
tinyestgrape
- 1
- 2
0
votes
1 answer
Why is Linux OS having an issue with registration and authentication on webauthn.io using yubikey 5 over NFC whereas it supports usb based only?
Webauthn.io in Linux OS asks for usb based registration and authentication.It does not support yubikey over NFC due to some issue.
I tried using my yubikey over omnikey reader for testing on Webauthn.io from chrome browser on Linux OS but it only…
AGh
- 1
- 2
0
votes
0 answers
Signtool to sign exe with HSM key token & code sign certificate
Its bit of learning ride so far so not sure if I have got full understanding of the subject. I will give it a try to explain the problem:
I need to sign a EXE file using the code signing certificate which was requested using YubiKey CSR. Since I…
0
votes
0 answers
Howto Verify HOTP codes
I'm making an application that has a two-factor authentication. We want to use HOTP type OAUTH with SHA1 encryption and 6 digits.
We were unable to perform data verification on a local server.
We have been reviewing the standard and we suspect that…
0
votes
0 answers
Failing to generate ed25519-sk key pair | Key enrollment failed: unknown or unsupported key type
I am trying to generate ed25519-sk and ecdsa-sk keys using ssh-keygen on my Windows computer. I have OpenSSH OpenSSH_for_Windows_8.6p1, LibreSSL 3.4.3 installed and Yubikey Firmware version: 5.4.3. But, when I do ssh-keygen.exe -t ed25519-sk -C…
Preeti
- 535
- 1
- 6
- 30
0
votes
0 answers
How to Make Sure a Security Key Still Works for My User Accounts?
I have registered two Security Keys to my user accounts at e.g. Apple, Google or Microsoft.
I may not have to use them on these accounts for years.
So how do I make sure that they still work correctly for those user accounts I registered them…
Pathfinder
- 1
- 3
0
votes
0 answers
Is it possible to rotate signing keys via apksigner when key is stored on YubiKey (PKCS11 protocol)?
The Android app I'm working on is manually signed with a private key that is stored on a physical YubiKey device, which utilizes the PCKS#11 protocol.
Now that Play App Signing has been around for some time, I would like to sunset this physical…
watermellen
- 1
- 1
0
votes
1 answer
Storing and Retrieving Data with WebAuthn
I would like to use WebAuthn to securely store and retrieve some senstive information on mobile Safari.
I mention Safari specifically because it is my main target browser and the storage and retrieval of password credentials is unsupported there.…
Anters Bear
- 1,816
- 1
- 15
- 41
0
votes
1 answer
Yubico SDK and FIDO Device
I'm writing a client application using yubico.Yubikey SDK in .Net. I'm trying to write a code which can fetch "FEITIAN" USB FIDO device connected to my laptop. Though Yubico and FEITIAN are two different companies, Still it shoul support protocol…
Parshuram
- 1
- 1
0
votes
1 answer
Yubikey OTP Programming Issue with AccessCode
I am building a web application in C# to program Slot1 on a YubiKey for OTP. I am successfully able to program the key unless the configuration has been protected. The serial number was used to protect Slot1's configuration, but whenever I try to…
Dennis Robare
- 3
- 1
0
votes
1 answer
How to tell which application my Yubikey is using?
According to Yubico, the Yubikey 5 supports many different "applications": OTP, OATH, PIV, and FIDO/U2F to name the main ones.
My question is... how do I know which one my Yubikey is using for a given website?
For example, say I register my key to…
Gillespie
- 5,780
- 3
- 32
- 54
0
votes
1 answer
Yubikey 5 HMAC-SHA1 Challenge/Response with APDU commands
I’m developping following this reference guide, I try a simple HMAC-SHA1 Challenge/Response with APDU commands.
I tested the APDU commands with a Yubikey 4 : it works without problems
Using reader: "Yubico Yubikey 4 CCID 0"
Sending APDU:…
0
votes
1 answer
Why does yubikey-personalization claim the zeroth USB interface?
I'm looking at the _ykusb_write() function from the Yubikey-Personalization package and the first line of code executed is
int rc = usb_claim_interface((usb_dev_handle *)dev, 0);
Why is the zeroth USB interface claimed? From what I can tell from…
TheAlertGerbil
- 3
- 1
0
votes
1 answer
Yubikey PIV: Enforce PIN complexity
im trying to enforce PIN complexity for PIV certificates.
The PIV Manager (which as i understand is no longer under developement) had an option to enforce this, but the YubiKey Manger does not have such an option afaik.
So im forced to use the PIV…
Capit1
- 1
0
votes
2 answers
WebAuthn : how to register an authenticator several time
I'm using Yubico demo to implement a webauthn server : https://developers.yubico.com/WebAuthn/WebAuthn_Walk-Through.html
I have implemented the CredentialRepository class to replace In Memory with access to a database.
Currently I am facing a…
Benoît Eirik
- 65
- 6