YubiKey Profile

ActivID CMS provides a dedicated profile for YubiKey devices.

Note: The YUBIKEY FIPS profile can also be used to issue YubiKey 5 devices after associating the pre-issuance ID with the appropriate ATR. However, OATH Open Authentication application personalization is not supported on YubiKey 5 devices.

ActivID CMS YubiKey Profile
Item	Description
Profile name	YUBIKEY FIPS
Profile description	Profile for YubiKey FIPS
Supported features	Personalization of up to 24 2048-bit keys PIV Personal Identity Verification (technical standard of "HSPD-12") PKI Objects (PIV Authentication, PIV Digital Signature, PIV Key Management Key, PIV Card Authentication, 20 Key Management Keys) loaded by ActivID CMS PIV EP Buffer Objects 1 synchronous OATH_HOTP Object loaded by ActivID CMS PIN, PIV AUTHENTICATION, CHUID Card Holder Unique Identifier and Printed Information objects are mandatory. All other objects are optional
PIN Policy	Minimum PIN length – 6 characters Maximum PIN length – 8 characters Maximum number of PIN tries – 15 Allow Weak PIN – No Force PIN to be Changed on First Card Usage – No Force PIN to Contain Only Digits – Yes

Note: The PIN for YubiKey devices can only be numeric.

For more details about this device profile, refer to Device Profiles and Hardware Devices.