Yubico / yubikey-personalization

YubiKey Personalization cross-platform library and tool
https://developers.yubico.com/yubikey-personalization/
BSD 2-Clause "Simplified" License
299 stars 82 forks source link

ykpersonalize man page should mention "vv" prefix required for YubiCloud #89

Closed ghost closed 7 years ago

ghost commented 7 years ago

https://upload.yubico.com , which is the web form for uploading credentials to YubiCloud, apparently requires the fixed field for the OTP setting (i.e. the "public identity") to be a string starting with "vv".

It would be helpful if the ykpersonalize man page mentioned this, so that users do not waste time generating and applying public identities to their Yubikeys that start with other characters than "vv", only to find that they cannot then upload their credentials to YubiCloud.

The man page should also note whether it is possible for YubiCloud to accept a fixed field that starts with "vv" but is otherwise hexadecimal, or whether YubiCloud requires the entire string to be MODHEX.

Ideally, the man page should also give an example of generating such credentials and storing them in the first slot of the Yubikey, using standard GNU/Linux tools at a Bash command line. For example, something like this:

ykpersonalize -1 -ouid=`dd if=/dev/random bs=1 count=32 2>/dev/null | \
md5sum | cut -c "1-12"`\
-ofixed=h:vv`dd if=/dev/random bs=1 count=30 2>/dev/null | \
md5sum | cut -c "1-30" | tr "[0123456789abcdef]" "[cbdefghijklnrtuv]"`