Introduction
From version 6.11.3 it is possible to manage Yubikey 5 series that have firmware version 5.7. This article will describe how you can add support to manage these new token types in your existing system. This is only applicable to customers who have already installed vSEC:CMS versions prior to 6.11.3.
Prerequisites
The following components need to be installed on any host where you will manage and use any Yubikey token that has 5.7 firmware:
- Minimum version of Yubikey minidriver installed on a host should be version 4.6.3.252 - please check Yubico's website to download and install.
- Minimum version of vSEC:CMS is 6.11.3 - please follow closely the instructions in this article to perform an update.
Add Support
An operator who has administrator role should log into the Admin console application on the server and perform the following steps:
- Navigate to Options - Smart Cards and click Add
- Select Add again
- Attach a Yubikey that has 5.7 firmware and make sure to select it from the reader drop down list and click Get
- You should see something similar to below and click Ok
- Then you should see similar to below. Leave all default settings as is and click Save to complete the steps required.
You should now be able to manage your Yubikey tokens with vSEC:CMS.
Additional Information
Currently it is not possible to reset the PUC code for tokens installed with 5.7 firmware when unregistering one from vSEC:CMS. It is recommended to use the Yubikey Manager tool to completely reset the token in that case. Once you do that then you can register the token again in vSEC:CMS.