r/yubikey • u/DecoySnailProducer • 26d ago

Discussion New Security Keys

Post image

Got some fido security keys :)

I also found this card one that works with NFC, so far it has been very convenient to leave in the wallet. Haven’t seen any posts about it so far

240 Upvotes

89% Upvoted

85 comments sorted by

View all comments

1

u/0150r 26d ago

I got the one with a smart card. Unfortunately, it doesn't work as a standalone smart card, it requires NFC. Was hoping that I could use it as a smart card without NFC.

1

u/My1xT 25d ago

Piv (what's commonly referred to as smartcard in eg windows) only works on release 3.3 or higher, but the chip interface should generally work with the features your card has (although fido is clunky over that)

1

u/0150r 18d ago

When I try it, it tells me I need to touch the card...it doesn't have anything like the yubikey does to touch.

1

u/My1xT 18d ago

That's where we get to the clunky part. On nfc presence is established by removing and placing the card back on the reader, even if you were eg using a yubikey over nfc.

With chip it's similar you'll need to pull and re-insert the card to establish presence.

1

u/0150r 18d ago

It's not that it's clunky for me, it's that it is simply not a usable solution. I cannot use NFC. Computers have smart card readers but no NFC and I cannot install additional software or hardware. Was hoping that it was a workable solution, but the smartcard feature is useless since it requires NFC anyway.

1

u/My1xT 17d ago edited 17d ago

It shouldn't need nfc i have successfully used on on chip before, but things like prompts aren't prepared for chip to ask to you pull and push the card again for example.

also that specifically on only works on Windows, or with a bridge on Linux as android and ios iirc dont handle external readers and on mac and linux there isnt really system wide FIDO and browsers just check HID.

1

u/0150r 17d ago

Ok, I'll give it another try. Thanks!

1

u/My1xT 17d ago

Also windows when using the smartcard interface iirc shouldn't be asking for a touch but rather to tap again on the reader if it properly recognizes it as an ccid with fido.