Yubikey Attestation (WIP)

Overview

This process outlines how to attest the certificates on the Yubikey with the Yubico provided certifcate in slot f9.

Prerequisites

• YubiKey 4 and newer
• Yubikey Manager
  • Download direct from Yubico: https://www.yubico.com/support/download/yubikey-manager/#h-downloads
  • Windows
    • (x64) - https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest-win64.exe
    • (x86) - https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest-win32.exe
  • Mac
    • https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest-mac.pkg
  • Linux
    
    • Src - https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest.tar.gz

Process

Attestation

1. Run the Yubikey Manager application and insert your key
   
   
2. Click on Applications and then click on PIV
   
   
   

3. Change PIN if Yubikey is fresh out of the box or it's been defaulted

   skip to step 4 (Enrollment) if Yubikey is already initialized

   1. Click on Configure PINs
      
      
   2. Click Change PIN and then check Use default (if it is default).
      Fill in the blanks.
      Finish with changing PIN by clicking on Change PIN
      
   3. Click on Change PUK and then check Use default (if it is default).
      Fill in the blanks.
      Finish with changing PUK by clicking on Change PUK
      
      
   4. Click on Change Management Key and then check Use default (if it is default).
      Fill in the blanks.
      Finish with changing the key by clicking on Finish
      1. You can check Protect with PIN to not need the Management Key for future