NEO

1
2

$ dnf install ykpers -y
$ ykpersonalize -m82

Unplug and plug it back in and it should be usable as a smartcard.

NFC / HTTP Auth

1
2

$ dnf install ykpers -y
$ ykpersonalize -n https://api.stelfox.net/sessions/yknfc?t=

This will hit the API with a URL like https://api.stelfox.net/session/yknfc?t=ccccccuddclhrkuvurcufviveulljleihvreukifegjh.

The API can then return a token that for accessing additional functionality.

Resetting

This will wipe all keys, user, and admin pins on the card.

This requires scdaemon and gpg-agent to be working and able to connect to the smartcard. It needs to be plugged into the computer and requires GPG version 2.0.22 or later. On yubikeys prior to the YubiKey4 check the version and confirm it's version 1.0.6 or later using the following command:

1
2

$ gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye
D[0000]  01 00 06 90 00

Indicating version 1.0.6. To reset the applet you can use the following manual hex commands:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

$ cat <<EOF | gpg-connect-agent
/hex
scd serialno
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 e6 00 00
scd apdu 00 44 00 00
/echo Card has been successfully reset.
/bye

Using as a RNG source

Vulnerability

A vulnerability was published around YubiKey NEOs use as smartcards and Yubico's response is top notch. I recommend following the steps in checking on your key to see if you're affected.