Yubikey

setup

buy it

• http://www.yubico.com/products/yubikey-hardware/yubikey-neo/

plug it in

dmesg says:

[176545.484426] usb 3-1.1: new full-speed USB device number 9 using xhci_hcd
[176545.506841] usb 3-1.1: New USB device found, idVendor=1050, idProduct=0110
[176545.506844] usb 3-1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[176545.506847] usb 3-1.1: Product: Yubikey NEO OTP
[176545.506848] usb 3-1.1: Manufacturer: Yubico
[176545.506954] usb 3-1.1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
[176545.511076] input: Yubico Yubikey NEO OTP as /devices/pci0000:00/0000:00:04.0/0000:02:00.0/usb3/3-1/3-1.1/3-1.1:1.0/input/input16
[176545.511167] hid-generic 0003:1050:0110.0005: input,hidraw4: USB HID v1.10 Keyboard [Yubico Yubikey NEO OTP] on usb-0000:02:00.0-1.1/input0

Read about setup as ssh key

• http://www.yubico.com/2012/12/yubikey-neo-openpgp/

The first thing it tells you is to install and run ykpersonalize:

• http://opensource.yubico.com/yubikey-personalization/releases.html

• • download, unpack

./configure

Fails with this error:

checking for libyubikey... no
configure: error: libyubikey v1.5+ not found, see http://code.google.com/p/yubico-c/

• apt-get install libyubikey-dev
• apt-get install pkg-config (already present)
• apt-get install libusb-1.0-0-dev
• apt-get install libjson0-dev (optional)

./configure 

success.

make
sudo make install

Now ykinfo should work but fails like this:

# ykinfo
ykinfo: error while loading shared libraries: libykpers-1.so.1: cannot open shared object file: No such file or directory

Need to run ldconfig to pick up changes

ldconfig

root@ferret:~/Downloads/ykpers-1.14.1# ykinfo
You must give at least one option.
Usage: ykinfo [options]

Options :

	-s        Get serial in decimal from YubiKey
	-m        Get serial in modhex from YubiKey
	-H        Get serial in hex from YubiKey
	-v        Get version from YubiKey
	-t        Get touchlevel from YubiKey
	-1        Check if slot 1 is programmed
	-2        Check if slot 2 is programmed
	-p        Get programming sequence from YubiKey
	-a        Get all information above

	-q        Only output information from YubiKey

	-V        Get the tool version
	-h        help (this text)

install yubico-c

https://github.com/Yubico/yubico-c

• download the zip from github
• unpack
• make -f simple.mk check

OK, the command line tools now work and tests pass for modhex, ykparse, ykgenerate.

configure gnome

• https://github.com/herlo/ssh-gpg-smartcard-config