YubiKey Profile

ActivID CMS provides a dedicated profile for YubiKey devices.

Note: The YUBIKEY FIPS profile can also be used to issue YubiKey 5 devices after associating the pre-issuance ID with the appropriate ATR. However, OATH Open Authentication application personalization is not supported on YubiKey 5 devices.

ActivID CMS YubiKey Profile
Item	Description
Profile name	YUBIKEY FIPS
Profile description	Profile for YubiKey FIPS
Supported features	Personalization of up to 24 2048-bit keys PIV Personal Identity Verification (technical standard of "HSPD-12") PKI Objects (PIV Authentication, PIV Digital Signature, PIV Key Management Key, PIV Card Authentication, 20 Key Management Keys) loaded by ActivID CMS PIV EP Buffer Objects 1 synchronous OATH_HOTP Object loaded by ActivID CMS PIN, PIV AUTHENTICATION, CHUID Card Holder Unique Identifier and Printed Information objects are mandatory. All other objects are optional
PIN Policy	Minimum PIN length – 6 characters Maximum PIN length – 8 characters Maximum number of PIN tries – 15 Allow Weak PIN – No Force PIN to be Changed on First Card Usage – No Force PIN to Contain Only Digits – Yes

Note: The PIN for YubiKey devices can only be numeric.

For more details about this device profile, refer to the HID ActivID Credential Management System Device Profiles and Hardware Devices Technical Note.