- Using the YubiKey Manager GUI
- View page source
The Yubico Authenticator is a quick, convenient way to find out what firmware your YubiKey has and/or to reset it - unless you prefer to use ykman (CLI), which is less powerful. If you are using the YubiKey Manager and do not find what you want in it, check to see if ykman (the CLI) has it.
Launch YubiKey Manager GUI
To launch YubiKey Manager follow the steps for your platform below.
Windows Launch
Open the Start menu panel, locate and click the YubiKey Manager app.
See AlsoSecurity Advisory YSA-2024-03Optionally, right-click the YubiKey Manager icon and select, Pin to Start or Pin to taskbar.
MacOS Launch
Open Launchpad, locate and click the YubiKey Manager icon.
Optionally, right-click the YubiKey Manager icon in the task bar and select Options > Keep in Dock.
View YubiKey Firmware Version
Launch the YubiKey Manager, GUI version.
At the YubiKey Manager prompt, insert your YubiKey and touch.
If your YubiKey is already connected, the YubiKey Manager Home tab is displayed.
Note that the tool only reads a single YubiKey at a time, so if you have multiple keys connected, it might not be evident which one YubiKey Manager is identifying.
View the listed YubiKey firmware version.
When your YubiKey credential is accepted YubiKey Manager opens the Home tab and lists the accepted YubiKey firmware:
- YubiKey series (e.g., YubiKey 5)
- Firmware (e.g., 5.4.X)
- Images of the various form factors within that series.
Managing Applications
YubiKey Manager can be used to check which applications are enabled on which interface and to enable or disable each application on each physical interface.
View Available Interfaces
The Interfaces tab displays your key’s form factor (for example, USB), and the interfaces it has. Use the Interfaces tab to configure what is available on that key. For example, you can disable the interfaces/applications by deselecting the respective checkboxes.
View YubiKey Enabled Applications
Launch the YubiKey Manager, GUI version.
Insert the YubiKey whose applications you want to manage.
View available applications. Select the Applications tab.
Enable and Disable Applications
Launch the YubiKey Manager, GUI version.
Insert the YubiKey whose applications you want to manage.
View available applications. Select the Interfaces tab.
A checkbox with a tick is shown next to each enabled applications.
Enable to disable applications for the YubiKey.
- Select the checkbox to enable an application.
- Unselect the checkbox to disable an application.
- Click Save Interfaces.
Note
For the YubiKey 5Ci, any modifications made to the applications over the USB interface also apply to the applications over Lightning®.
Locking
Once the desired applications have been selected, a lock code can be set to prevent changes to the set of enabled applications. This is done using the ykman CLI ykman config set-lock-code. The lock code is 16 bytes presented as 32 hex characters. For more information, see ykman config set-lock-code [OPTIONS].
Configure YubiKey Slot on YubiKey
Launch the YubiKey Manager, GUI version.
Insert the YubiKey whose applications you want to manage.
Select application to configure.
- Select the Applications tab.
- Select from the displayed list of applications.
Select the YubiKey slot to configure. Click the slot Configure button.
Complete the configuration options. These are specific to each application type.
Resetting FIDO2 Function
Resetting the key is not the same as unblocking it. Because resetting the FIDO2 function returns the key to its beginning state when it has no PIN, you must set a new PIN and enroll the key again after resetting it.
Remove your YubiKey if it is still connected to your machine, then launch ykman and insert your key.
Click on the word Applications at the top of that tab. A list of menu options appears. The specific options depend on the key.
Select FIDO2. The FIDO2 page appears.
Click the Reset FIDO button. The Reset FIDO confirmation popup appears.
Click Yes. Everything on the key is removed: the PIN (if set) is deleted. The Remove and re-insert your YubiKey! prompt appears.
Remove and re-insert your YubiKey. The Touch your YubiKey prompt appears, and the green LED flashes.
Touch your YubiKey. The message “FIDO applications have been reset” appears at the bottom of the Applications page.
Remove the key in preparation for re-enrolling it.
Click for Yubico Support.
Cookies | Privacy Policy
