A phone can get stolen, sold, infected by malware, have its storage read by a connected computer. Option 2. The YubiKey Smart Card Minidriver enables users and administrators to use the native Windows interface for certificate enrollment, managing the YubiKey smart Card PIN,. VAT. The YubiKey can be configured with two different C/R modes — the standard one is a 160 bits HMAC-SHA1, and the other is a YubiKey OTP mimicking mode, meaning two subsequent calls with the same challenge will result in different responses. This might be what you're referring to; Yubico Authenticator - Imgur. 1. The YubiKey 5 Series keys support a broad range of protocols, such as FIDO2/WebAuthn, U2F, Smart card, OpenPGP, and OTP. The screenshot above shows where the flag setting in the personalization. Insert the YubiKey. To launch ykman in GUI mode or CLI mode from the command line, select and run the command for one of the options listed below: Launch ykman CLI, ( 32-bit) C: >"C:Program Files (x86)YubicoYubiKey Managerykman. Perform batch programming of YubiKeys, extended settings, such as fast triggering, which prevents the accidental triggering of the nano. Spare YubiKeys. Select Configuration Slot 2. please visit tocuh the YubiKey and test the OTP. I came up with a solution as Yubico/yubikey-personalization-gui#72 (comment)i messed up and sent some misconfigured keys to some end users that do not have local administrative access. If you want to install the Yubikey on a private computer you can click on one of the links that says “Download for own. ・Yubico社の提供のYubiKey Personalization ToolとmacOS Logon Toolを使用して設定済み。 トラブル後の過程 1,ひとまずBOOTCAMPでWindows10をあらかじめインストール済みだったのでWindowsを立ち上げてみることに。1, Using the “YubiKey Personalization Tool” got the Settings tab 2. Using the YubiKey Personalization Tool. YubiKey Personalization ToolをインストールしてMacでYubikeyを使用するための設定を行う 2. United States. Click on Interfaces and make sure all options are checked on, then go back to OTP and see if it's still disabled. csv file generated by the YubiKey Personalization Tool. YubiKey Personalization ToolをインストールしてMacでYubikeyを使用するための設定を行う 2. Extract the file that is downloaded. msc”. Solution. Select the "OATH-HOTP" tab | Advanced 2. Learn how to use the YubiKey Personalization Tool to configure the two slots on your YubiKey on Windows, macOS, and Linux. FIDO U2F - similar to Yubico OTP, the U2F application can be registered with an unlimited. tar. YubiKey is a. Check that NFC is configured properly: Download the YubiKey Personalization Tool. , set a AES key) YubiKeys. Install the applet. Allow YubiKey to generate the OTP within the text editor. YubiKey-Minidriver-4. To do so, install the minidriver with the INSTALL_LEGACY_NODE=1 option set: msiexec /i YubiKey-Minidriver-4. Cross-platform YubiKey Personalization Tool User Guide Software Version 3. This is the official PPA, open a terminal and run. Select Yubico OTP. While you can't specify character output speed in the Manager GUI, there is a command you can run with the CLI instead:. Products. YubiKeys are USB tokens that act like keyboards and generate one-time passwords, static passwords or work in challenge-response mode. On Macs running Monterey (macOS 12) or newer, the fn or Globe key can be configured to switch layouts (or Change Input Source) via System Preferences > Keyboard. Before you can enable the YubiKey factor, you need to configure the YubiKeys and generate a YubiKey OTP secrets file (also known as the YubiKey Seed File) using the YubiKey Personalization Tool. I have a new Yubikey 4 with firmware v4. No more reaching for your phone to open an app, or memorizing and typing in a code – simply touch the YubiKey to verify and you’re in. What is important this is snap version. The YubiKey Personalization tool is a legacy tool used for just configuring the OTP functions of the YubiKey. Send a challenge to a YubiKey, and read the response. personalization tool. The Add YubiKey dialog appears. The old Personalization Tool doesn't find the Yubikey at all. Launch the YubiKey Personalization Tool. So I guess they changed the API in their new. 1. If you didn't program your key yet then program it the same way as you program your main key. Insert your YubiKey into any USB slot on the machine you wish to use for encryption and launch the personalization tool. Each device has a unique code built on to it, which is used to generate codes that help confirm your identity. Once YubiKey Manager has been downloaded, you can configure a static password using the following steps: Open YubiKey Manager. YubiKey SDKs. YubiKeys can be programmed using the YubiKey Manager or YubiKey Personalization Tools. HP Drive Key Boot Utility . Don't use the KeeOTP plugin with KeePass. However, this method did not work for me. Development. Leave the QR code page open. Click Write Configuration. yubioath-desktop`. YubiKey Personalization Tool doesn't recognise the key is there. 25. The tools supports the newer OATH implementation (YubiKey NEO and 4) as well as the older slot-based implementation (YubiKey Standard and Edge). Use the YubiKey Personalization Tool for this (Go to Tools tab -> Number Converter). Each application, along with a link to the related reset instructions, is listed below. Version history and release notes 2. To emulate a factory reset, you can delete the credentials from both slots, program a Yubico OTP credential to slot 1, and upload the credential to YubiCloud. Import YubiKey tokens into STA, so that they become available to assign to users. This document will guide you through the set up and configuration process of the YubiKey Personalization Tool, programming of the YubiKeys, and output / extraction of the OTP secrets which need to. The tool works with any currently supported YubiKey. Download Yubico Login for Windows 10 (32 bit) Yubico Login for Windows Configuration Guide. YubiKeys are available worldwide on our web store and through authorized resellers. Personalization tools. However, if you programmed a static password that is greater than 38 characters using the Static Password > Advanced menu in the YubiKey Personalization Tool, you will need a copy of the parameters of your static password credential (public ID, private ID and secret key) in order to program it into another key (you will also need to. Use the YubiKey Manager to configure FIDO2, OTP and PIV functionality on your YubiKey on Windows, macOS, and Linux operating systems. -1. Scroll to the bottom of the list and select Thumbprint. Submit a request. Secure Mac login. YubiKey Personalization GUI. The YubiKey Personalization Tool is a Qt based Cross-Platform utility designed to facilitate re-configuration of YubiKeys on Windows, Linux and Mac platforms. I’m using the Linux version in this post, but the Windows and Mac versions should work very similarly. It requires a physical touch to prevent malware. 0. Insert the YubiKey. The following features are available over the. 1 - 2023/06/09. The YubiKey Personalization Tool is a Qt based Cross-Platform utility designed to facilitate re-configuration of YubiKeys on Windows, Linux and Mac platforms. Hey Yubico, Getting "No YubiKey inserted" in the YubiKey Personalization Tool. €50 EUR excl. OK, the manager program works, but I'm not seeing OTP available. You can then add your YubiKey to your supported service provider or application. Buy YubiKey 5, Security Key with FIDO2 & U2F, and YubiHSM 2. The OTP applet on the YubiKey cannot technically be reset to the factory defaults. Under Configuration Slot, select the slot you'll be using for Duo. First, install the management applications to configure the YubiKey. 9. OK, the manager program works, but I'm not seeing OTP available. 11. Click Yubico OTP Mode in the main tool window, or Yubico OTP at the top-left. They are created and sold via a company called Yubico. Using a YubiKey to login to your computer. I came up with a solution as Yubico/yubikey-personalization-gui#72 (comment)ykman fido access change-pin [OPTIONS] ykman fido access unlock [OPTIONS] (Deprecated) ykman fido access verify-pin [OPTIONS] ykman fido credentials [OPTIONS] COMMAND [ARGS]…. It can store up to 32 OATH event-based HOTP and time-based TOTP credentials on the device itself, which makes it easy to use across multiple computers. A shared library and a command-line tool is included. yubikey-personalization-gui Note This project is no longer under active development. A phone can get stolen, sold, infected by malware, have its storage read by a connected computer. The YubiKey 5 Series Comparison Chart. Select Quick. Download the Yubico Authenticator App. Use the YubiKey Personalization Tool for this (Go to Tools tab -> Number. This document will guide you through the set up and configuration process of the YubiKey Personalization Tool, programming YubiKeys, and the output / extraction of the OTP secrets which need to be uploaded to the Okta admin portal. Perform batch programming of YubiKeys, extended settings, such as fast triggering, which prevents the accidental triggering of the nano-sized YubiKeys when only slot 1 is configured. Using YubiCloud, supporting Yubico OTP is not much harder than supporting regular passwords. A YubiKey is not configured to handle challenge / response from the factory. No need for typing! (see details below the image). The tool works with any YubiKey (except the Security Key) and supports batch programming, firmware check, and extended settings. Select Log configuration output under Logging Settings and then select PSKC format from the drop-down menu. After inserting your YubiKey into a USB port, start the YubiKey Personalization Tool. Note that not all physical tokens are compatible with the YubiKey Personalization Tool; for this, you require a key that can support OATH-HOTP. YubiKey Smart Card Minidriver (Windows) Download. PIV enables you to perform RSA or ECC sign/decrypt operations using a private key stored on the smartcard, through common interfaces like PKCS#11. Ensure that the data on. This is the only supported format. 12. YubiKey Personalization Tool by Yubico. 1. When you press the button on the YubiKey, the default behavior of the YubiKey is to emit a. Take the YubiKey identifier part (described above) of the code and remove the initial “ubnu”. The Yubikey Manager finds the Yubikey and shows a serial, but you can't config everything. YUBICO WebAuthn OTP U2F OATH PGP PIV YubiHSM2 Software Projects. Add the Yubikey ppa: # add-apt-repository ppa:yubico/stable Run update to download new package lists: # apt update Install packages with the "download-only" flag: # apt-get --download-only install scdaemon yubikey-personalization libccid pcscd rng-tools gnupg2 ykpersonalize Copy the files to USB drive, for example:Note that this software replaces a previous, deprecated application called the “ YubiKey Personalization Tool ”, to which some documentation still refers. Plug the YubiKey into your device. Works out-of-the-box with operating systems and. Retrieve the public key id: > gpg --list-public-keys. Why Yubico. Select the Yubico OTP tab. You can use the cross platform personalization tool to activate it – indeed, you can also swap the configs so your YubiCloud credential is in slot 1 and your VIP is in slot 2! To help prevent making. 1. , set a AES key) YubiKeys. Graphical personalization tool for YubiKey tokens. DEV. To enable use without sudo (e. Step 1: Use the Yubico Authenticator app, to scan the QR code from the first time you registered a YubiKey to this account. The YubiKey Personalization tool can be configured to program multiple YubiKeys at a time, as well as for a single device. Press the button briefly for slot 1. The FIDO2-only Security Key is perfect for Windows Hello for Business, but it cannot be managed using the YubiKey Personalization. PROGRAMMING THE YUBIKEYS 1. You’re done!Please make sure that you've used the YubiKey personalization tool to configure the key you're trying to use for hmac-sha1 challenge-response in slot 2. When using OATH with a YubiKey, the shared secrets are stored and processed in the YubiKey’s secure element. ykpers. For System Authentication install the yubico PAM module: $ sudo dnf install -y pam_yubico. Here is what the "YubiKey Personalization Tool" looks like when opening it on a 4K monitor in Windows 10 by. 3. You may have to authorize the application to access external devices. 250 (latest) Apr 7, 2017. Insert the YubiKey into a USB port. Download the command line (CLI) version of the YubiKey Personalization Tool. Downloads. Take the YubiKey identifier part (described above) of the code and remove the initial “ubnu”. 5 Debugging mode is disabled. 1. Google Chrome), update udev rules: The Yubico Authenticator tool lets you generate OATH one-time password codes with your YubiKey. Note: Yubico Login for Windows secures Windows 10 and 11 if not managed by AAD or AD. Insert the Yubikey and start the YubiKey Manager. The remainder is the hexadecimal representation of its unique ID (eight digits). 1. Flexible – Support for time-based and counter-based code generation. FYI: The YubiKey Personalization Tool does have a few more small features when it comes to programming a static password, such as the ability to insert a tab when programming a static password. 3) Keep Your Backup Codes in a Secure Location. 1b) Program your YubiKey for HMAC-SHA1 Challenge Response using the YubiKey Personalization Tool. use the nth YubiKey found. Computer: MacBook Pro 13-inch (2 USB ports) Mac OS 11. Google Case Study. Click Add YubiKeys under the Add YubiKey OTP option. The YubiKey Personalization tool is a legacy tool used for just configuring the OTP functions of the YubiKey. If you are trying to output digits (0-9) with the French AZERTY keyboard layout, you can hold the Shift key on your keyboard while using the YubiKey, or enable the flag. Using the Yubico Personalization Tool, YubiKeys can be programmed easily by simply inserting each YubiKey into a USB port. The purpose of setting access codes is to prevent others from deleting a credential from the slot(s) or programming a different credential. Download the YubiKey personalization tool. Each YubiKey must be registered individually. Select the the configuration slot you would like the YubiKey to use over NFC. There are also command line examples in a cheatsheet like manner. It's just annoying to normal users now. /klas. Save the config somewhere safe in case one or both keys get destroyed/lost somehow. Sort by. If button press is configured, please note you will have to press the YubiKey twice when logging in. exe “YubiKey Manager” which contains ykman. 13. 0. In order for YubiPlugin to work correctly with your YubiKey you need to configure your YubiKey first. The YubiKey 5C NFC has six distinct applications, which are all independent of each other and can be used simultaneously. Select the Tools tab. Mobile SDKs Desktop SDK. If not already completed, configure a SecureAuth IdP Multi-Factor Authentication realm to generate QR codes. 3. The purpose of this document is to describe the process of programming YubiKeys for use with Duo. This document will guide you through the set up and configuration process of the YubiKey Personalization Tool, programming YubiKeys, and the output / extraction of the OTP secrets which need to. It is a cross platform programming tool based on the QT toolkit. 1. Choose one of the slots to configure. OT: wth are there THREE apps instead of just one?!Buy YubiKey 5, Security Key with FIDO2 & U2F, and YubiHSM 2. 2 Linux Platform The YubiKey Personalization Tool can run on any Linux based system. a. In this video in the how-to series, I will introduce you to the Yubico Personalization tool. Update the settings for a slot. It is recommended to be used by power users and developers looking for legacy support or defining configurations for others. 2) Convert this hex number to modhex. ChrisHalos Post subject: Re: Determine current slot configurations. The tool: is valid with any YubiKey (except the Security Key). YubiKey-Minidriver-4. Import YubiKey tokens into STA, so that they become available to assign to users. Yubikey 2, but we've got a 4 on the way tomorrow. But first, you have to edit some settings in the Yubikey Personalization tool. 2 Revision: e9b9582 Distribution: Snap. 556720-8755, a limited liability company incorporated under the laws of Sweden, with address Kungsgatan 44, 2nd Floor, 111 35 Stockholm, Sweden (“Yubico“) and the legal entity you represent (“You”) and governs the Yubico software. OTP - this application can hold two credentials. Secure all services currently compatible with other. Insert your YubiKey. The YubiKey Personalization Tool is a Qt based Cross-Platform utility designed to facilitate re-configuration of YubiKeys on Windows, Linux and Mac platforms. 0 interface as well as an NFC. Option 2. Download and install the YubiKey Personalization Tool. gz (2019-07-03)Before you begin. kmille@linbox:~ ykman --version YubiKey Manager (ykman) version: 4. So it turns out that my YubiKey does not support OTP, so it was never going to work. YubiKey Personalization Tool is an intuitive program designed to help users reinitialize the AES key in their YubiKey devices. Documentation The complete reference. PAMモジュールであるmacOS Logon Toolをインストールする 3. (2) You set a configuration protection access code when programming a credential into one of the slots. Click Quick on the "Program in Yubico OTP mode" page. If you'd like to use it as backup for example for keepass just program it as your programmed your main key with Yubikey Personalization tool (like u/Calder_Dale linked). That's why the Personalization Tool says slot 1 is programmed. #YubiKey instrukcja obsługi kluczy zabezpieczających #Yubico0:49 Nadawanie PIN do YubiKeyKonto Google1:45 Dodawanie YubiKey do konta 👉Google3:49 Generowanie. yubikey-personalization-gui-3. Run the YubiKey Personalization Tool. Okay so there's absolutely no risk if someone buys an used Yubikey and confirms with Yubico tools that it is the real deal? Reply. Made in the USA and Sweden. I've downloaded YubiKey Personalization Tool v3. 1 Document Version 1. Select the Tools tab. We recommend ensuring that the password is a strong password, and something that an attacker won’t be able to guess easily. The YubiKey OTP secrets file is a . Mode 82 (in hex) enables the YubiKey NEO as a composite USB device (HID + CCID) and allows OTPs to be emitted while in use as a smart card. Posted: Sun Jan 29, 2017 10:57 am. Click Add YubiKeys under the Add YubiKey OTP option. Select Quick. Click Swap. YubiKeys support multiple authentication protocols so you are able to use them across any tech stack, legacy or modern. YubiKey 5 NFC. YubiKeys are available worldwide on our web store and through authorized resellers. b. When the QR code appears on the page, right-click the code and download it. Start pcscd. And a full range of form factors allows users to secure online accounts on all of the. Start menu --> "YubiCo" folder --> Right click on "Yubikey Personalization Tool" --> More --> Open file. Click Quick . Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. Debug info: KeePassXC - Version 2. Documentation The complete reference manual on the YubiKey is required reading if you want to understand the entire picture and what each parameter does. The remainder is the hexadecimal representation of its unique ID (eight digits). 25 (Bản chuẩn cuối) - 05/07/2018 Download; YubiKey Personalization Tool 3. msi. If you set an access code, and then forget it, you. The tool provides a same simple step-by-step approach to make configuration of YubiKeys easy to follow and understand, while still being powerful enough to exploit all functionality both. Verify it is plugged in correctly by the solid/blinking green light in the middle of the gold circle. 1. For both AES (Yubico OTP) and OATH-HOTP mode, there are two possibilities to initialize the Yubikey with privacyIDEA. Export the SSH key from GPG: > gpg --export-ssh-key <public key id>. This is because you register your Yubikey to your devices (1 identity for all), and not your devices to your Yubikey (several identities for 1). YubiKey Personalization Tool の起動画面 こちらのツールでは YubiKey の OTP 出力に関する詳細な設定が行えます。 具体的には YubiKey Manager 同様、 YubiKey の Slot1, 2 の 2つのスロットに対し、Yubico OTP/OATH-HOTP/Static Password/Challenge-Response などを設定することが可能です。YubiKey slot 2 is properly configured for HMAC-SHA1 challenge-response with YubiKey Personalization Tool. Issues addressed:Start the YubiKey Manager (or Yubikey Personalization Tool). Get authentication seamlessly across all major desktop and mobile platforms. You can use the Yubico Authenticator (GUI) to view sign-in data stored on your YubiKey (this is only for WebAuthn FIDO2/U2F). (By the way: there is an advantage to using a public id which starts with Modhex vv (i. The YubiKey Personalization Tool must be used, along with a Portable Symmetric Key Container (PSKC) file that contains secret keys in plain value format, to provision the YubiKey devices. The Tool will open to the main page. To enable use without sudo (e. Select "Configuration Slot 1" 3. Post subject: Re: Window 10 + Yubikey 4: No yubikey inserted. Products. YubiKey Manager CLI (ykman) User Manual Clay Degruchy Created September 23, 2020 13:13 - Updated July 30, 2021 23:211. Management tools. The tool provides a same simple step-by-step approach to make configuration of YubiKeys easy to follow and understand, while still being powerful enough to exploit all functionality both. Step 3. As part of the process of manufacturing every YubiKey, a Yubico OTP credential is programmed into slot 1, and its information is also transferred. With the release of the v2. Under Configuration Slot, select the slot you'll be using for Duo. Open a text editor, then tap the YubiKey that was configured for use with Okta. The YubiKey Personalization Tool is a Qt based Cross-Platform utility designed to facilitate re-configuration of YubiKeys on Windows, Linux and Mac platforms. Configure a slot to be used over NDEF (NFC). Click on the Details tab. . 0. I don't remember setting an access code and I had never installed or used the Yubikey personalization tool. I think it needs to be done for each key if there are multiple keys. Re: Lastpass IOS App not reading my new Yubikey via NFC. Same remark I don't know if there is write access. There are a number of different installers for various operating systems – pick the installer for your operating system. Choose one of the slots to configure. The first slot is used to generate the passcode when the YubiKey button is touched. The Add YubiKey dialog appears. The YubiKey Personalization Tool is a Yubico product and is not developed by Thales Group. i messed up and sent some misconfigured keys to some end users that do not have local administrative access. Security Functions. In the Configuration Protection section, select "YubiKey (s) Protected - Disable Protection". Also known as: yubikey-personalization. xx) The YubiKey Personalization Tool; OtpKeyProv, the KeePass plugin that adds support for OATH-HOTP; Setup. OATH – HOTP (Event) OATH – TOTP (Time) OpenPGP. YubiKey 4 Series. To set up multiple Yubikeys in one seed file when using the YubiKey Personalization Tool and setting the Yubico OTP select Advance and prior to selecting Write Configuration, Select Program Multiple YubiKeys. Getting a biometric security key right. , set a AES key) YubiKeys. Please select your option below. 2) Convert this hex number to modhex. Hi everyone, I want to set a static password on my YubiKeys as a part of my password manager (Password I can remember + YubiKey Static PW). Portable – Get the same set of codes across our other Yubico Authenticator apps for desktops as well as for all leading mobile platforms. Reviewed in the United States on September 17, 2023. Download personalization tool for yubico at: 1) Press the YubiKey button to generate a code. . Running as root (see #25) does nothing but exit with code 132. TLDR: Add the following to your Windows Yubico tool shortcut: -platform windows:dpiawareness=0. When the QR code appears on the page, right-click the code and download it. Once YubiKey Manager has been downloaded, you can configure a static password using the following steps: Open YubiKey Manager. We have a range of computer login choices for organizations and individuals. Log on the QR code realm to register the YubiKey device in the end-user's account. It generates one time passwords (OTPs), stores private keys and in general implements different authentication protocols. Industries. Note the Public Identity value, listed as the second value item in the file. With Okta’s Adaptive Multi-Factor Authentication (MFA), users are able to securely log in to Okta’s platform with a. The tool follows a simple step-by-step approach to configuring YubiKeys and is valid with any YubiKey (except the Security Key). Plug your YubiKey into a free USB port and open the YubiKey Personalization Tool. 1 and 3. Insert key and log in or Run the Yubikey PIV Manager tool as the user account you are adding a PIV cert. Yubicoの新しいクロスプラットフォームパーソナル化ツールは、YubiKey NEOやYubiKey NEO beta/Productionに対応した新機能や改善点を備えたものです。NDEF設定、Secret IDの変更、HMAC-SHA1の設定、ステータスの表示などの機能があります。ダウンロードはこちらから。 Use the YubiKey Personalization Tool to configure the two slots on your YubiKey on Windows, Linux, and Mac OS X operating systems. Buy YubiKey 5, Security Key with FIDO2 & U2F, and YubiHSM 2. When the VIP enabled YubiKey is shipped, it's first configuration slot is factory programmed for Symantec VIP credentials and the second configuration slot programmed with a standard Yubico OTP is dormant in the second identity slot and can be activated using the YubiKey Personalization Tool. Some features depend on the firmware version of the Yubikey. Insert your YubiKey to an available USB port on your Mac. 1) Open you YubiKey Personalization Tool -> Go To Settings->Logging Settings. 0. The secrets always stay within the YubiKey. The Tutorial shows you Step-by-Step How to Install YubiKey Manager CLI Tool and GUI in Ubuntu 22. Select Yubico OTP. The tool will now automatically program your YubiKey with a random secret and upload the data to GreenRADIUS. The tool provides a same simple step-by-step approach to make configuration of YubiKeys easy to follow and understand, while still being powerful enough to exploit all functionality. 4) Use YubiKeys With Your Password Manager. Graphical personalization tool for YubiKey tokens. Make sure to pad the end with 0s like this:I installed the Windows version of YubiKey Personalization Tool, hoping it would provide some of this information, but it refuses to detect the key! Neil January 6, 2023, 2:31am 4. Something else to note is the. In the Configuration Slot section, select the slot you wish to remove the configuration protection from. 3 (Big Sur) M1 Chip(YubiKey Personalization Tool) Yes, it does not have a display but it has buttons for that: Open the HOTP input field (Login-App), press the button and your 6-digit is magically written where it should be. There is the list of prerequisites for using a Yubikey with BCVE (use Yubikey Personalization Tool for configuration): All slots must be unconfigured (usually, the. Launch the YubiKey Personalization Tool and insert the YubiKey into a USB port. And Yubikey Manager for Ubuntu Bionic is the Software required to configure to configure FIDO2,. Qt 5. But that prefix is. 1. Launchable: yubikey-personalization-gui. The YubiKey is a device that makes two-factor authentication as simple as possible. Open YubiKey Manager. The YubiKey Personalization Tool is used to program the two configuration slots in your YubiKey. 4) Make sure you have the YubiKey the USB slot as well.