Linux command
ykpersonalize 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Show YubiKey status
ykpersonalize -v
Program slot 1 with Yubico OTP
ykpersonalize -1
Program slot 2 with challenge-response
ykpersonalize -2 -ochal-resp -ochal-hmac
Set static password in slot 2
ykpersonalize -2 -ostatic-ticket
Set CCID mode
sudo ykpersonalize -m 86
Program with specific AES key
ykpersonalize -1 -a[hex_key]
Set access code to protect configuration
ykpersonalize -oaccess=[hex_code]
说明
ykpersonalize configures YubiKey hardware tokens from Yubico. It can program the two configuration slots with various authentication modes including Yubico OTP, HMAC-SHA1 challenge-response, and static passwords. Each YubiKey has two slots: slot 1 activates on short touch, slot 2 on long touch. Slots can be independently configured for different use cases like OTP authentication and disk encryption. Access codes can protect configuration from unauthorized changes. The tool requires direct USB access to the YubiKey.
参数
- -1 / -2
- Program slot 1 or slot 2.
- -a _key_
- Set AES key (hex encoded).
- -c _code_
- Current access code to unlock.
- -oaccess= _code_
- Set new access code.
- -ochal-resp
- Enable challenge-response mode.
- -ochal-hmac
- Use HMAC-SHA1 for challenge-response.
- -ostatic-ticket
- Enable static password mode.
- -m _mode_
- Set USB mode (OTP, CCID, etc.).
- -v
- Verbose output.
- -y
- Auto-confirm operations.
FAQ
What is the ykpersonalize command used for?
ykpersonalize configures YubiKey hardware tokens from Yubico. It can program the two configuration slots with various authentication modes including Yubico OTP, HMAC-SHA1 challenge-response, and static passwords. Each YubiKey has two slots: slot 1 activates on short touch, slot 2 on long touch. Slots can be independently configured for different use cases like OTP authentication and disk encryption. Access codes can protect configuration from unauthorized changes. The tool requires direct USB access to the YubiKey.
How do I run a basic ykpersonalize example?
Run `ykpersonalize -v` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -1 / -2 do in ykpersonalize?
Program slot 1 or slot 2.