Does your Yubikey require a security key PIN?

1. you don't want to enter an additional PIN, but want to use the Yubikey directly without entering a PIN?

Use the „Yubikey Manager“ application to deactivate the „FIDO2“ interface. As an employee, you will find this application pre-installed on your computer or you can install it manually in the Software Centre.

If the application is not installed on your computer, here is a link to the download: https://www.yubico.com/support/download/yubikey-manager/#h-downloads

Insert the Yubikey into the USB port of your computer.

If your key is not recognised when you start the application, start the application again as a (local) administrator. You can select this in the start menu by right-clicking on the application under „More → Run as administrator“.

Deactivate the „FIDO2“ interfaces in the application:

The pin request is now deactivated.

2. you want to use the PIN function of the Yubikey for security reasons

First try using the manufacturer's default PIN : 123456.

You can set your own PIN with the „Yubikey Manager“ application. You will find this pre-installed on your computer or you can install it manually in the software centre.

If your key is not recognised when you start the application, start the application again as a (local) administrator. You can do this in the Start menu by right-clicking on the application and selecting „More → Run as administrator“.

In the application, select „Applications → FIDO2“ and set a new PIN there. If you no longer know the old PIN, perform a reset. Please note that you may need to register again in the SSO portal after a reset!