YKPERSONALIZE(1) YubiKey Personalization Tool M YKPERSONALIZE(1) (NAME) ykpersonalize - OTP YubiKey (SYNOPSIS) ykpersonalize [-Nkey] [-1 | -2] [-sfile] [-ifile] [-fformat] [-axxx] [-cxxx] [-ooption] [-y] [-v] [-d] [-h] [-n] [-t] [-u] [-x] [-z] [-m] [-S] [-V] [-Dxxx_] (DESCRIPTION) AES (user ID) YubiKey. : YubiKey (https://www.yubico.com/wp-content/uploads/2015/03/YubiKeyManual_v3.4.pdf) (OPTIONS) -Nkey n- YubiKey . -1 . OTP . -oappend-cr . -2 . YubiKey II (static key) . -oappend-cr -ostatic-ticket -ostrong-pw1 -ostrong-pw2 -oman-update . -z (slot) . -sfile ( - stdout ). -ifile ( - stdin ). ycfg . -fformat -s -i . ycfg legacy. -a[xxx] AES ( OATH-HOTP/HMAC CHAL-RESP) ( modhex) ( stdin ). -a . -c[xxx] ( modhex) . : -oaccess= . stdin . -ooption . : fixed=fffffffffff (public identity) modhex YubiKey ( ). 'h:' . (fixed) YubiKey OTP . . uid[=uuuuuu] uid OTP (private identity) . . uid OTP ( ) OTP AES YubiKey . AES YubiKey . uid stdin . access[=fffffffffff] . . YubiKey . stdin . oath-imf=xxx OATH Initial Moving Factor. YubiKey . 0 1048560 16 . ticket-flag / (ticket flag) Ticket Flags . configuration-flag / (configuration flag) Configuration flags . -y . -d (dry-run) YubiKey. -v ( ). -h . -V . -n URI URI NFC NDEF. -t text NFC NDEF. YubiKey 3 4 -m mode YubiKey. mode:cr_timeout:autoeject_timeout mode : 0 OTP. 1 CCID. 2 OTP/CCID. 3 U2F. 4 OTP/U2F. 5 U2F/CCID. 6 OTP/U2F/CCID. MODE_FLAG_EJECT 80 : 81 cr_timeout YubiKey (challenge response) ( 15 ) autoeject_timeout 81 OTP ykpersonalize YubiKey . ykneomgr ( CCID) u2f-host ( U2F) . YubiKey 3 -S0605... scanmap YubiKey. 45 90 . YubiKey . (scanmap) : cbdefghijklnrtuvCBDEFGHIJKLNRTUV0123456789!\t\r scanmap YubiKey : 06050708090a0b0c0d0e0f111517181986858788898a8b8c8d8e8f9195979899271e1f202122232425269e2b28 Dvorak (U.S.): 0c110b071c180d0a0619130f120e09378c918b879c988d8a8699938f928e89b7271e1f202122232425269e2b28 azerty ( /shifted ): 06050708090a0b0c0d0e0f111517181986858788898a8b8c8d8e8f9195979899a79e9fa0a1a2a3a4a5a6382b28 BEPO ( Dvorak ): 0b140c0938363707130512330f0d16188b948c89b8b6b787938592b38f8d9698a79e9fa0a1a2a3a4a5a69c2b28 ( i i ): 06050708090a0b340d0e0f111517181986858788898a8b8c8d8e8f9195979899271e1f202122232425269e2b28 (whitespace) . -D0403... deviceinfo YubiKey. YubiKey 2.3 -u . (updatable) . -x YubiKey. (updatable) . (TICKET FLAGS) tab-first (tab) . . append-tab1 (tab) . . append-tab2 (tab) . append-delay1 . 1.x 2.x . append-delay2 . 1.x 2.x . append-cr carriage return ( Enter) . YubiKey 2.0 protect-cfg2 . (lock bit) . YubiKey 2.1 oath-hotp OATH-HOTP YubiKey. OATH-HOTP . YubiKey 2.2 chal-resp - (challenge-response). (CONFIGURATION FLAGS) send-ref modhex . -ostrong-pw2 ! . pacing-10ms . pacing-20ms . static-ticket . AES . ticket-first . allow-hidtrig HID/ caps- num scroll-lock. . YubiKey 2.0 short-ticket . -ostatic-ticket . -oshort-ticket -ostatic-ticket YubiKey << >> fixed uid key . h:8b080f0f122c9a12150f079e Hello World! qwerty . . strong-pw1 . . strong-pw2 modhex . -ostrong-pw1 . man-update . -ostatic-ticket . 2.x . YubiKey 2.1 oath-hotp8 HOTP . oath-fixed-modhex1 modhex. oath-fixed-modhex2 modhex. oath-fixed-modhex modhex. oath-id=m:OOTTUUUUUUUU OATH . 2.2 YubiKey 2.1 . YubiKey 2.2 chal-yubico - Yubico OTP. chal-hmac HMAC-SHA1. hmac-lt64 HMAC . ( ) . chal-btn-trig YubiKey ( ) . serial-btn-visible YubiKey . 2.x . serial-usb-visible YubiKey iSerial USB . 3.0 3.1 . serial-api-visible YubiKey API . oath-id[=m:OOTTUUUUUUUU] OATH YubiKey. OATH Yubico YubiKey : (modhex) OO=ub TT=he () UUUUUUUU= . YubiKey . oath-fixed-modhex . YubiKey . <<5.3.4 - OATH-HOTP Token Identifier>> YubiKey http://yubico.com/files/YubiKey_manual-2.0.pdf ..SS " YubiKey 2.3 " use-numeric-keypad - . 2.x . fast-trig . 3.0 . allow-update ( ) . dormant YubiKey / . YubiKey 2.4/3.1 led-inv LED YubiKey . OATH-HOTP OATH-HOTP HMAC ( ) -a . - (Challenge-response) CHAL-RESP (keypress) ( - ). USB HID . Modhex Modhex "" . modhex : tr "[0123456789abcdef]" "[cbdefghijklnrtuv]" : tr "[cbdefghijklnrtuv]" "[0123456789abcdef]" (EXAMPLES) YubiCloud: ouid=`dd if=/dev/urandom 2>/dev/null | tr -d '[:upper:]' | tr -cd '[:xdigit:]' | fold -w12 | head -1` ofixed=ff`dd if=/dev/urandom 2>/dev/null | tr -d '[:upper:]' | tr -cd '[:xdigit:]' | fold -w10 | head -1` ykpersonalize -1 -ouid=h:$ouid -ofixed=h:$ofixed uid vv . YubiCloud https://upload.yubico.com . (BUGS) ykpersonalize : https://github.com/Yubico/yubikey-personalization/issues (SEE ALSO) ykpersonalize https://developers.yubico.com/yubikey-personalization YubiKey Yubico : http://www.yubico.com ykpersonalize Version 1.20.0 YKPERSONALIZE(1)