#558 YubiKey backup

[deinck]

I'm on Windows 11 x64 and have a NFC 5C YubiKey registered working as expected

Two Qs's

1. Need to make a backup to a slightly older YubiKey Neo firmware 3.4.9 with the same Slot 2 config as my other one. but the YubiKey option in PasswordSafe is grayed out. How can I save a backup? I went through a bunch of troubleshooting outlined here with no avail. https://chatgpt.com/share/677c1593-ea40-8011-a781-bfc2920926a2

2. Once the db has been registered to as YubiKey, isn't there an option to roll back to a std master password? Worried if I'm unable to work #1 out, I best not use it.

[Rony Shapiro]

1. If the Yubikey option's grayed out, then PasswordSafe didn't recognize the YubiKey. Does Windows recognize it?
2. You can roll back via the Manage->Change Master Password dialog. Click on the Help utton there and scroll down to "Removing YubiKey Authentication" for step-by-step instructions.

[deinck]

very much appreciate the reply Rony!

1. Indeed, Windows recognizes it. I even saw YubiKey's Mgr app recognize it as that's how I was able to see if it has its slot 2 configured. BUT I see I had set it as challenge-response as recommended, but now going back in there it has reverted to Yubico OTP. But this is how my newer 5C is set so I'd think that'd work, no?
2. I see that now, so good to know should not be able to pull a backup onto my other key. thx!

[Rony Shapiro]

Slot 2 definitely needs to be configured as challenge-response (HMAC-SHA1) for it to work with PasswordSafe.
PasswordSafe should do this when you configure your YubiKey with it.

[deinck]

ok, the real issue then still is that the YubiKey dropdown option never is not grayed out so it can't interact with it at all even though windows and other apps can. I set slot2 to challenge-response again via YubiKey Mgr. but still grayed out in Password Safe. May need to rest back to master password I suppose? :-(

[deinck]

Update:
I suppose you can consider this resolved I guess though I don't know for sure what changed. I attempted to see if the option was there and mysteriously it is, and I was able to set my backup YubiKey. I wish I knew what changed.

thx for the help Rony