Versions Compared

Old Version 2

changes.mady.by.user Tony Lam

Saved on

compared with

New Version 3

changes.mady.by.user Tony Lam

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...


Process

Attestation

  1. Insert YubiKey

  2. Open a Terminal and/or PowerShell.

    1. Windows: Run the following to adding the Yubikey Manager

    application and insert your key
    Click on Applications and then click on PIV
    Image Removed

    Change PIN if Yubikey is fresh out of the box or it's been defaulted

    Note

    skip to step 4 (Enrollment) if Yubikey is already initialized

    1. Click on Configure PINs
      Image Removed
    2. Click Change PIN and then check Use default (if it is default).
      Fill in the blanks.
      Finish with changing PIN by clicking on Change PIN
      Image Removed
    3. Click on Change PUK and then check Use default (if it is default).
      Fill in the blanks.
      Finish with changing PUK by clicking on Change PUK
      Image Removed
    4. Click on Change Management Key and then check Use default (if it is default).
      Fill in the blanks.
      Finish with changing the key by clicking on FinishYou can check Protect with PIN to not need the Management Key for future
      Image Removed

      cli tools to environment PATH

      Note

      Note: you must close and re-open your terminal for these to be picked up


      Code Block
      #Machine Wide (must be run with Administrative priviliges)
$newPath = "$env:ProgramFiles\Yubico\Yubikey Manager;" + [Environment]::GetEnvironmentVariable("PATH", [EnvironmentVariableTarget]::Machine)
[Environment]::SetEnvironmentVariable("PATH", $newPath, [EnvironmentVariableTarget]::Machine)
 
#User Level
$newPath = "$env:ProgramFiles\Yubico\Yubikey Manager;" + [Environment]::GetEnvironmentVariable("PATH", [EnvironmentVariableTarget]::User)
[Environment]::SetEnvironmentVariable("PATH", $newPath, [EnvironmentVariableTarget]::User)


  3. Run the following command to attest the certificate in slot 9a

    Code Block
    ykman piv keys attest 9a <path to save attested certificate>


  4. Upload <path to save attested certificate> to appropriate location/persons.