Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

yubikey-agent -setup does not work #78

Closed
asychev opened this issue Feb 15, 2021 · 3 comments
Closed

yubikey-agent -setup does not work #78

asychev opened this issue Feb 15, 2021 · 3 comments

Comments

@asychev
Copy link

asychev commented Feb 15, 2021

With the fresh YubiKey 5C NFC on OSX 11.2.1:

$ ykman info
Device type: YubiKey 5C NFC
Serial number: REDACTED
Firmware version: 5.2.7
Form factor: Keychain (USB-C)
Enabled USB interfaces: OTP+FIDO+CCID
NFC interface is enabled.

Applications	USB    	NFC
OTP     	Enabled	Disabled
FIDO U2F	Enabled	Enabled
OpenPGP 	Enabled	Enabled
PIV     	Enabled	Enabled
OATH    	Enabled	Enabled
FIDO2   	Enabled	Enabled
$ yubikey-agent -setup
🔐 The PIN is up to 8 numbers, letters, or symbols. Not just numbers!
❌ The key will be lost if the PIN and PUK are locked after 3 incorrect tries.

Choose a new PIN/PUK:
Repeat PIN/PUK:

🧪 Reticulating splines...
‼️  The default Management Key did not work

If you know what you're doing, reset PIN, PUK, and
Management Key to the defaults before retrying.

If you want to wipe all PIV keys and start fresh,
use --really-delete-all-piv-keys ⚠️

What could be a problem?

@asychev
Copy link
Author

asychev commented Mar 3, 2021

@FiloSottile Any chance you could help?

@asychev
Copy link
Author

asychev commented Mar 10, 2021

OK, seems like this project is not maintained anymore despite the statement made on #76

@asychev asychev closed this as completed Mar 10, 2021
@gador
Copy link
Contributor

gador commented Nov 11, 2021

@asychev if you're still looking for an answer (and anyone else):

I had the same error. It turns out that the new yubikeys want a pin of at least 6 characters. Entering a PIN less than that will result in the error message The default Management Key did not work.

I worked around the issue by reseting the device with
yubikey-agent --really-delete-all-piv-keys -setup and then entering a new PIN with at least 6 characters.

Also, the error message the first time (when entering a PIN which is too short) is The default PIN did not work. After that first try it will change to The default Management Key did not work.

FiloSottile added a commit that referenced this issue Jan 1, 2023
They would just cause the PIN change to fail.

Fixes #129
Fixes #78
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants