Yubico/yubikey-ksm

lockCode in KeyProvisiongFormat

Closed this issue · 2 comments

Hi,
what is the lockCode that is mentioned in the KeyProvisiongFormat?
When I provision a YubiKey with the Qt YubiKey Personalization Tool I get the identity, internaluid and aeskey but no lockCode.

That would be the accesscode.

In the tools "Traditional" format that is the 8th field, in the "Yubico" format it's the 5th field.

The "Yubico" format should also match closely with what the yubikey-ksm tools expect.

/klas

mig5 commented

An easier answer for the original poster: the lockCode is the 'Configuration Protection' code (write-protects the Yubikey). It is only viewable when using the 'Advanced' mode in the various config screens of the Personalization Tool.