YubiKey - Unlocking Pin Code

Owned by Len Levaskevich
Last updated: Dec 11, 2024 by Tony Lam

This will not work if you obtained certificate via enrollment station (enroll01.ad.rit.edu)


If you accidentally enter your pin code incorrectly 3 times, your YubiKey will become locked and need the pin code reset with the PUK. The PUK was setup during the Yubikey setup process and will needed to change/unlock/unblock your YubiKey PIN. In the event this information is lost, the YubiKey must be reset removing all certificates & stored logins.



Typical Windows Smart Card lockout error

Resetting Pin Code

  1. Locate the YubiKey Manager  in the Windows Start Menu
  2. Click on Applications 
  3.  PIV from the Applications Dropdowan
  4. Configure Pin
  5. Should say Unblock Pin if your pin code is blocked. If it says change, your pin code should still be valid. 
    Click on Unblock Pin 
  6. Enter your PUK 
    1. PUK: This is the reset pin when you first setup the YubiKey. If you forgot this information or did not write it down, the YubiKey must be reset and reset up for all MFA login & certs generated on the device (wipe and start over)

    2. New Pin: This can be the same pin you just locked out or create a new one that will be used for all future logins with your Yubikey accounts.

    3. Unblock pin
  7. Unplug & re-plugin your Yubikey
  8. Try logging in with new pin code set