search

BodnarSoft / KeePass-Smart-Certificate-Key-Provider

KeePass plugin that allows to use Smart Card certificates to encrypt database more securely.
MIT License
32 stars 9 forks source link

Same certificate on multiple Yubikey #11

Open YoNevelt opened 1 year ago

YoNevelt commented 1 year ago

Hi, I tried to do the best thing and upload the same certificate to more Yubikeys. But opening the database with the backup key is not working, KeePass says:

Selected certificate can't be used! Reason: At least on the of the given parameters can't be interpreted correctly.

There's no other messages, details, nothing. I have a Yubikey 5C Nano and a Yubikey 5C NFC. I generated the certificate on the Nano, exported it then imported to the NFC model into the same slot. Windows doesn't show any difference between the certificates, when the selector pops up, I can see the same. After typing the PIN, I get access to the certificate but KeePass / the plugin doesn't accept/work with it.

FrantisekBodnar commented 1 year ago

Hello, I never experienced this issue. Do you use PFX certificate, with private key? The plugin only restricts expiration date of the cert, nothing else, rest is handled by Windows OS.

YoNevelt commented 1 year ago

I cleaned up the personal certificates in Windows (certmgr.msc) just to be sure I have only 1 Yubikey certificate active. I generated the certificate with RSA2048. Set the expire date and name. I have Management Key set but basically only the hardware is a different model, the setup is the same. I'll try it on a different Windows machine later and I get back to you with the results. Thank you for your prompt attention.