[{"data":1,"prerenderedAt":128},["ShallowReactive",2],{"i-heroicons:building-office-2":3,"i-heroicons:computer-desktop":8,"i-heroicons:cloud":10,"i-heroicons:server":12,"i-heroicons:folder":14,"i-heroicons:chart-bar":16,"i-heroicons:lock-closed":18,"i-heroicons:rectangle-stack":20,"i-heroicons:scale":22,"i-heroicons:key":24,"i-heroicons:finger-print":26,"i-heroicons:cpu-chip":28,"i-heroicons:document-text":30,"i-heroicons:shield-exclamation":32,"i-heroicons:shield-check":34,"blog-en-whats-new-on-yubikey-firmware-5-7":36,"i-heroicons:user":126},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 21h19.5m-18-18v18m10.5-18v18m6-13.5V21M6.75 6.75h.75m-.75 3h.75m-.75 3h.75m3-6h.75m-.75 3h.75m-.75 3h.75M6.75 21v-3.375c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125V21M3 3h12m-.75 4.5H21m-3.75 3.75h.008v.008h-.008zm0 3h.008v.008h-.008zm0 3h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 17.25v1.007a3 3 0 0 1-.879 2.122L7.5 21h9l-.621-.621A3 3 0 0 1 15 18.257V17.25m6-12V15a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 15V5.25m18 0A2.25 2.25 0 0 0 18.75 3H5.25A2.25 2.25 0 0 0 3 5.25m18 0V12a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 12V5.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 15a4.5 4.5 0 0 0 4.5 4.5H18a3.75 3.75 0 0 0 1.332-7.257a3 3 0 0 0-3.758-3.848a5.25 5.25 0 0 0-10.233 2.33A4.5 4.5 0 0 0 2.25 15\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M21.75 17.25v-.228a4.5 4.5 0 0 0-.12-1.03l-2.268-9.64a3.375 3.375 0 0 0-3.285-2.602H7.923a3.375 3.375 0 0 0-3.285 2.602l-2.268 9.64a4.5 4.5 0 0 0-.12 1.03v.228m19.5 0a3 3 0 0 1-3 3H5.25a3 3 0 0 1-3-3m19.5 0a3 3 0 0 0-3-3H5.25a3 3 0 0 0-3 3m16.5 0h.008v.008h-.008zm-3 0h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 12.75V12A2.25 2.25 0 0 1 4.5 9.75h15A2.25 2.25 0 0 1 21.75 12v.75m-8.69-6.44l-2.12-2.12a1.5 1.5 0 0 0-1.061-.44H4.5A2.25 2.25 0 0 0 2.25 6v12a2.25 2.25 0 0 0 2.25 2.25h15A2.25 2.25 0 0 0 21.75 18V9a2.25 2.25 0 0 0-2.25-2.25h-5.379a1.5 1.5 0 0 1-1.06-.44\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 0 1 3 19.875zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M16.5 10.5V6.75a4.5 4.5 0 1 0-9 0v3.75m-.75 11.25h10.5a2.25 2.25 0 0 0 2.25-2.25v-6.75a2.25 2.25 0 0 0-2.25-2.25H6.75a2.25 2.25 0 0 0-2.25 2.25v6.75a2.25 2.25 0 0 0 2.25 2.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M6 6.878V6a2.25 2.25 0 0 1 2.25-2.25h7.5A2.25 2.25 0 0 1 18 6v.878m-12 0q.354-.126.75-.128h10.5q.396.002.75.128m-12 0A2.25 2.25 0 0 0 4.5 9v.878m13.5-3A2.25 2.25 0 0 1 19.5 9v.878m0 0a2.3 2.3 0 0 0-.75-.128H5.25q-.396.002-.75.128m15 0A2.25 2.25 0 0 1 21 12v6a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 18v-6c0-.98.626-1.813 1.5-2.122\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":23},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 3v17.25m0 0c-1.472 0-2.882.265-4.185.75M12 20.25c1.472 0 2.882.265 4.185.75M18.75 4.97A48 48 0 0 0 12 4.5c-2.291 0-4.545.16-6.75.47m13.5 0q1.515.215 3 .52m-3-.52l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202zm-16.5.52q1.485-.305 3-.52m0 0l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":25},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 5.25a3 3 0 0 1 3 3m3 0a6 6 0 0 1-7.029 5.912c-.563-.097-1.159.026-1.563.43L10.5 17.25H8.25v2.25H6v2.25H2.25v-2.818c0-.597.237-1.17.659-1.591l6.499-6.499c.404-.404.527-1 .43-1.563A6 6 0 1 1 21.75 8.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":27},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M7.864 4.243A7.5 7.5 0 0 1 19.5 10.5c0 2.92-.556 5.709-1.568 8.269M5.742 6.364A7.47 7.47 0 0 0 4.5 10.5a7.46 7.46 0 0 1-1.15 3.993m1.989 3.559A11.2 11.2 0 0 0 8.25 10.5a3.75 3.75 0 1 1 7.5 0q0 .79-.064 1.565M12 10.5a14.94 14.94 0 0 1-3.6 9.75m6.633-4.596a18.7 18.7 0 0 1-2.485 5.33\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":29},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M8.25 3v1.5M4.5 8.25H3m18 0h-1.5M4.5 12H3m18 0h-1.5m-15 3.75H3m18 0h-1.5M8.25 19.5V21M12 3v1.5m0 15V21m3.75-18v1.5m0 15V21m-9-1.5h10.5a2.25 2.25 0 0 0 2.25-2.25V6.75a2.25 2.25 0 0 0-2.25-2.25H6.75A2.25 2.25 0 0 0 4.5 6.75v10.5a2.25 2.25 0 0 0 2.25 2.25m.75-12h9v9h-9z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M19.5 14.25v-2.625a3.375 3.375 0 0 0-3.375-3.375h-1.5A1.125 1.125 0 0 1 13.5 7.125v-1.5a3.375 3.375 0 0 0-3.375-3.375H8.25m0 12.75h7.5m-7.5 3H12M10.5 2.25H5.625c-.621 0-1.125.504-1.125 1.125v17.25c0 .621.504 1.125 1.125 1.125h12.75c.621 0 1.125-.504 1.125-1.125V11.25a9 9 0 0 0-9-9\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 9v3.75m0-10.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.75c0 5.592 3.824 10.29 9 11.622c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.57-.598-3.75h-.152c-3.196 0-6.1-1.25-8.25-3.286m0 13.036h.008v.008H12z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 12.75L11.25 15L15 9.75m-3-7.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.749c0 5.592 3.824 10.29 9 11.623c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.571-.598-3.751h-.152c-3.196 0-6.1-1.248-8.25-3.285\"\u002F>",{"id":37,"documentId":38,"title":39,"content":40,"slug":41,"published":42,"createdAt":43,"updatedAt":43,"publishedAt":44,"locale":45,"authorManual":46,"cover":47,"tags":98,"seo":123,"author":51},117,"xxpoknce8r3envmva5rwjp2m","What's New on YubiKey Firmware 5.7?","\u003Cp>Yubico announced on its blog on May 21st that they will soon offer YubiKeys with the latest 5.7 firmware.\u003C\u002Fp>\n\u003Cp>Reference) Yubico Blog\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.yubico.com\u002Fblog\u002Fnow-available-for-purchase-yubikey-5-series-and-security-key-series-with-new-5-7-firmware\u002F\">Now available for purchase: YubiKey 5 Series and Security Key Series with new 5.7 firmware\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>I recently received a YubiKey 5C NFC with the latest 5.7 firmware, so I'd like to try it out and see what has changed.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>YubiKey Appearance\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30.jpeg\" alt=\"YubiKey 5C NFC ブリスターパック\">\u003C\u002Fp>\n\u003Cp>YubiKey 5C NFC 5.7 firmware\u003C\u002Fp>\n\u003Cp>The YubiKey I obtained this time has a Type-C USB connection.\u003C\u002Fp>\n\u003Cp>Opened the blister pack.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_2_18ef58cf98.jpeg\" alt=\"YubiKey 5C NFCの表面\">\u003C\u002Fp>\n\u003Cp>YubiKey - front\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_3_3358505800.jpeg\" alt=\"YubiKey 5C NFCの裏面\">\u003C\u002Fp>\n\u003Cp>YubiKey- back\u003C\u002Fp>\n\u003Cp>It looks the same as the previous YubiKey 5.\u003C\u002Fp>\n\u003Cp>Only the firmware was updated, so this is to be expected.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Changes in the firmware update\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>From Yubico's blog, here are the changes in this firmware update:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>Expanded passkey and passwordless storage capabilities\u003C\u002Fstrong> – accommodating up to 100 device-bound passkeys (up from 25), 64 OATH seeds (up from 32), 24 PIV certificates, and 2 OTP seeds at once for a total of 190 credentials.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Expansion and enhancement of public key algorithms\u003C\u002Fstrong>, including support for larger RSA keys (RSA-3072 and RSA-4096), Ed25519, and X25519 key types enhances key management functions and flexibility for organizations, aligning with \u003Ca href=\"https:\u002F\u002Fdl.dod.cyber.mil\u002Fwp-content\u002Fuploads\u002Fpki-pke\u002Fpdf\u002Funclass-memo_dodcryptoalgorithms.pdf\">DoD memo requirements\u003C\u002Fa> on stronger public key algorithms. \u003Cstrong>Migration to Yubico’s own cryptographic library\u003C\u002Fstrong> that performs the underlying cryptographic operations (decryption, signing, etc.) for RSA and ECC.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enterprise attestation\u003C\u002Fstrong> facilitates the retrieval of unique identifiers during FIDO2 registration and streamlining asset tracking by allowing identity providers to read the serial number from the YubiKey during FIDO2 registration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced PIN complexity settings across all YubiKey\u003C\u002Fstrong> applications, including FIDO2, PIV, and OpenPGP.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>FIDO Client to Authenticator Protocol (CTAP) 2.1 implementation\u003C\u002Fstrong> brings improvements around the FIDO2 PIN, including Force PIN Change and Minimum PIN Length, addressing PIN requirements in “enroll on behalf” scenarios.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>About 1:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The number of passkeys that can be registered has been increased from 25 to 100, and the storage capacity for OATH and PIV certificate seeds has been increased.\u003C\u002Fp>\n\u003Cp>Compared to before, some more services and products support passkeys, so it seems that the number that can be registered has been increased with an eye to the future.\u003C\u002Fp>\n\u003Cp>At the moment, just a few people use more than the 25 passkeys limit, but considering the future, it's probably helpful to have more storage space.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>About ２:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Algorithms with larger key lengths are now supported.\u003C\u002Fp>\n\u003Cp>Originally, multiple key types were supported, but the number of algorithms with higher security strength is steadily increasing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>About ３:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>During FIDO registration, the ID provider can read the serial number of the YubiKey and identify the YubiKey, making it possible to manage it by preventing personal YubiKeys from being registered.\u003C\u002Fp>\n\u003Cp>However, to use this function, it seems that separate customization is required at the Yubico factory, so this function is not available on YubiKeys that have already been shipped.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>About ４:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>It is now possible to set the complexity of PIN used for FIDO2, PIV, etc.\u003C\u002Fp>\n\u003Cp>However, this also requires separate customization at the Yubico factory, so it seems that this function is not available on YubiKeys that have already been shipped.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>About ５:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>It is now possible to restrict PIN settings, such as forcing PIN changes and minimum PIN length restrictions.\u003C\u002Fp>\n\u003Cp>This function allows administrators to specify how PINs should be used before distributing YubiKeys to end users. So they can impose restrictions such as a minimum number of characters for PINs and make users change the PIN the first time, just like traditional password requirements.\u003C\u002Fp>\n\u003Cp>This is a useful feature for system administrators who want to enforce security policies because if a company has a security policy, they can operate YubiKeys following that policy.\u003C\u002Fp>\n\u003Cp>It seems that these PIN restriction settings can be tried using commands, so I would like to try them out right away.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Trying out PIN restriction settings\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Since the settings are usually done by the administrator, let's assume the following as an example.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You are an administrator and you distribute YubiKeys to employees for FIDO authentication.\u003C\u002Fli>\n\u003Cli>You want to meet the company security policy of a PIN of 10 digits or more.\u003C\u002Fli>\n\u003Cli>You want each employee to set their PIN.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To carry out the above assumptions, we will try the following two settings on the YubiKey:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Set the minimum number of digits for the PIN.\u003C\u002Fli>\n\u003Cli>Always change the PIN when using the device.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Now, let's get to the practical part.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Preparation for setting up\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>To change the PIN settings, you need to run commands using a tool called YubiKey Manager CLI.\u003C\u002Fp>\n\u003Cp>※ Please note that this does not seem to be possible with the GUI YubiKey Manager.\u003C\u002Fp>\n\u003Cp>Also, the command is compatible with YubiKey Manager CLI version 5.4.0 and later. So please download 5.4.0.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdevelopers.yubico.com\u002Fyubikey-manager\u002FReleases\u002F\">https:\u002F\u002Fdevelopers.yubico.com\u002Fyubikey-manager\u002FReleases\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Go to the site and download 5.4.0.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_4_ebb545b343.png\" alt=\"YubiKeyManager CLIのダウンロードページ\">\u003C\u002Fp>\n\u003Cp>Since my test environment is Windows, I'll download the Windows installer and run the installation.\u003C\u002Fp>\n\u003Cp>Once the installation is complete, run the command prompt.\u003C\u002Fp>\n\u003Cp>※ The command prompt must be launched with administrator privileges.\u003C\u002Fp>\n\u003Cp>The commands were taken from the page pushed by Yubico.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdocs.yubico.com\u002Fsoftware\u002Fyubikey\u002Ftools\u002Fykman\u002Findex.html\">YubiKey Manager (ykman) CLI and GUI Guide\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Check the version of the command.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ykman -v\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_5_71699425e4.png\" alt=\"コマンドプロンプト\">\u003C\u002Fp>\n\u003Cp>You can see that YubiKey Manager version 5.4.0 is installed.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Setting the default PIN\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>To restrict the PIN, it is necessary to set a default PIN beforehand.\u003C\u002Fp>\n\u003Cp>※ If you try to set restrictions without setting a PIN, you will get the error "ERROR: No PIN is set."\u003C\u002Fp>\n\u003Cp>The default PIN can be set from the Windows system settings or the GUI version of YubiKey Manager.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.yubion.com\u002Fpost\u002Ffido2-security-key-pin-setting-fingerprint-setting-for-windows?lang=en\">FIDO2 Security Key PIN Setting \u002F Fingerprint Setting - for Windows\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This time, I will set it using the CLI command.\u003C\u002Fp>\n\u003Cp>Set a 6-digit PIN (123456) with the following command.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ykman fido access change-pin -n 123456\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Now that the settings are complete, I will try setting PIN restrictions.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Set the minimum PIN length\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Set the minimum PIN length to 10 digits with the following command.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ykman fido access set-min-length 10\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>When setting up, you will be asked for your current PIN. So enter the PIN (123456) you have already set.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_6_efd4be8bc3.jpeg\" alt=\"コマンドプロンプト\">\u003C\u002Fp>\n\u003Cp>The settings have been changed.\u003C\u002Fp>\n\u003Cp>Let's try changing the PIN to one shorter than 10 digits.\u003C\u002Fp>\n\u003Cp>Execute the following command, specifying an 8-digit PIN.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ykman fido access change-pin -n 12345678\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_7_25e6f628d4.jpeg\" alt=\"コマンドプロンプト\">\u003C\u002Fp>\n\u003Cp>Because the PIN is shorter than the specified 10 digits, an error was displayed and the change failed.\u003C\u002Fp>\n\u003Cp>This is expected.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>[Additional Information]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you enter a short PIN when changing it from Windows system settings, you will see an error message saying "Try creating a PIN that 's more complex."\u003C\u002Fp>\n\u003Cp>Please note that this message is not about the PIN length and can be confusing.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_8_52edd1ce09.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Next, try setting a 10-digit PIN.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ykman fido access change-pin -n 1234567890\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_9_e66f72d63d.jpeg\" alt=\"コマンドプロンプト\">\u003C\u002Fp>\n\u003Cp>This was successful without any errors.\u003C\u002Fp>\n\u003Cp>One thing to note is that once you change the minimum PIN length, you can set a longer number of digits than you set it to, but you will not be able to set a shorter number of digits.\u003C\u002Fp>\n\u003Cp>For example, after setting 10 digits, you can increase it to 12 digits, but you cannot decrease it to 8 digits.\u003C\u002Fp>\n\u003Cp>If you set it incorrectly, you will need to reset the FIDO information.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Setting to force a PIN change\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Next, let's try forcing the user to change their PIN before using the device.\u003C\u002Fp>\n\u003Cp>Run the following command:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ykman fido access force-change\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Enter your current PIN.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_10_cdc76f90db.jpeg\" alt=\"コマンドプロンプト\">\u003C\u002Fp>\n\u003Cp>The setup is complete.\u003C\u002Fp>\n\u003Cp>To check if the settings are correct, I will try to use FIDO authentication in this state.\u003C\u002Fp>\n\u003Cp>To test FIDO, I will try logging in to the YubiOn FIDO Logon management screen using FIDO.\u003C\u002Fp>\n\u003Cp>I will check the operation on a Windows 11 computer.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_11_1394b58a4a.png\" alt=\"PINを変更する必要があるというメッセージ\">\u003C\u002Fp>\n\u003Cp>When I selected the security key, I received a message saying "PIN must be changed before using security key."\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_12_1b83d8d183.png\" alt=\"PIN変更ウィンドウ\">\u003C\u002Fp>\n\u003Cp>After a short while, the window for changing the PIN will appear.\u003C\u002Fp>\n\u003Cp>You can change your PIN by entering your current PIN and your new PIN twice and clicking the OK button.\u003C\u002Fp>\n\u003Cp>This operation is very easy for users to understand.\u003C\u002Fp>\n\u003Cp>It looks like it will be possible to prevent users from using the YubiKey until they change their PIN at least once.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>[Additional Information]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The behaviors are different on Windows 10.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_13_259d994a8c.png\" alt=\"FIDOのPIN入力\">\u003C\u002Fp>\n\u003Cp>When I entered the PIN for FIDO authentication, the attempt failed with a message saying that the PIN was incorrect, even though I was sure I entered the correct PIN.\u003C\u002Fp>\n\u003Cp>Is this as expected?\u003C\u002Fp>\n\u003Cp>In the case of Windows 10, it does not automatically move on to the PIN change sequence as when I tried it on Windows 11. It seems that the YubiKey will not treat the PIN as correct unless you simply change it.\u003C\u002Fp>\n\u003Cp>Since the only message you get is that the PIN is incorrect, it's difficult to tell whether you need to change your PIN or you simply entered the wrong PIN. So it's important to be careful about this.\u003C\u002Fp>\n\u003Cp>The PIN change window does not appear automatically. So you will need to change your PIN separately.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_14_ff61d6df90.jpeg\" alt=\"コマンドプロンプト\">\u003C\u002Fp>\n\u003Cp>※ This time, the PIN was changed using a command, but for general users, it is easier to change the PIN from the Windows system.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.yubion.com\u002Fpost\u002Ffido2-security-key-pin-setting-fingerprint-setting-for-windows?lang=en\">FIDO2 Security Key PIN Setting \u002F Fingerprint Setting - for Windows\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>When I tried entering the changed PIN to perform FIDO authentication in the same way, I was asked to touch the key without getting an error.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_15_595ca6db73.png\" alt=\"FIDO認証でセキュリティキーにタッチする画面\">\u003C\u002Fp>\n\u003Cp>If users are using Windows 10 computers, administrators who are considering operation should be aware of these differences.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Summary\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>YubiKey with firmware version 5.7 is now available.\u003C\u002Fp>\n\u003Cp>There are no particular changes in appearance, but several functions have been added.\u003C\u002Fp>\n\u003Cp>The PIN management function can be used by installing the YubiKey Manager CLI (version 5.4.0) and executing commands.\u003C\u002Fp>\n\u003Cp>The PIN restriction function does not have any particular impact on general users, but it does expand the options for company administrators who distribute YubiKeys to their employees.\u003C\u002Fp>\n\u003Cp>However, some behaviors change depending on the Windows OS used. So when administrators distribute YubiKeys to employees, they will likely need to create a detailed initial setup manual.\u003C\u002Fp>\n\u003Cp>The YubiKeys we sell will also be available with firmware 5.7. So please contact us if you are looking for an authenticator.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.yubion.com\u002Fcontact-form?lang=en\">CONTACT\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>We also offer solutions that use security keys. So if you are interested, please take a look at our solutions and blogs.\u003C\u002Fp>\n\u003Cp>Thanks for reading to the end.\u003C\u002Fp>\n","whats-new-on-yubikey-firmware-5-7","2024-06-26","2026-04-28T07:28:40.858Z","2026-04-28T07:28:44.087Z","en","Matsuda",{"id":48,"documentId":49,"name":50,"alternativeText":51,"caption":51,"focalPoint":51,"width":52,"height":53,"formats":54,"hash":93,"ext":56,"mime":60,"size":94,"url":95,"previewUrl":51,"provider":96,"provider_metadata":51,"createdAt":97,"updatedAt":97,"publishedAt":97},1008,"ihryr8mp5o3v9syze0n2vcj1","blog-whats-new-on-yubikey-firmware-5-7-1.jpeg",null,1309,1438,{"large":55,"small":66,"medium":75,"thumbnail":84},{"ext":56,"url":57,"etag":58,"hash":59,"mime":60,"name":61,"path":51,"size":62,"width":63,"height":64,"sizeInBytes":65},".jpeg","https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Flarge_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30.jpeg","73714aae35973596a13c99e14dabf7a7","large_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30","image\u002Fjpeg","large_blog-whats-new-on-yubikey-firmware-5-7-1.jpeg",118.64,910,1000,118639,{"ext":56,"url":67,"etag":68,"hash":69,"mime":60,"name":70,"path":51,"size":71,"width":72,"height":73,"sizeInBytes":74},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fsmall_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30.jpeg","11d2deb6f399bd60fe38fface7171b3c","small_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30","small_blog-whats-new-on-yubikey-firmware-5-7-1.jpeg",34.18,455,500,34183,{"ext":56,"url":76,"etag":77,"hash":78,"mime":60,"name":79,"path":51,"size":80,"width":81,"height":82,"sizeInBytes":83},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fmedium_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30.jpeg","1a03a0259b1023ac594cc206b6cffb92","medium_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30","medium_blog-whats-new-on-yubikey-firmware-5-7-1.jpeg",72.4,683,750,72399,{"ext":56,"url":85,"etag":86,"hash":87,"mime":60,"name":88,"path":51,"size":89,"width":90,"height":91,"sizeInBytes":92},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fthumbnail_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30.jpeg","3da84a771dcdbc8e89dd626fdcaae9da","thumbnail_blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30","thumbnail_blog-whats-new-on-yubikey-firmware-5-7-1.jpeg",4.4,142,156,4398,"blog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30",213.11,"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_whats_new_on_yubikey_firmware_5_7_1_fbced29f30.jpeg","aws-s3","2026-04-28T07:27:30.966Z",[99,105,111,117],{"id":100,"documentId":101,"name":102,"slug":51,"createdAt":103,"updatedAt":103,"publishedAt":104},44,"ndyi3ro2mlncggjsp6vy47ue","Passkeys","2026-04-28T05:22:55.540Z","2026-04-28T05:22:57.559Z",{"id":106,"documentId":107,"name":108,"slug":51,"createdAt":109,"updatedAt":109,"publishedAt":110},54,"aik3it1d9trj8u1rr5wbmw2d","FIDO2","2026-04-28T05:24:47.451Z","2026-04-28T05:24:49.300Z",{"id":112,"documentId":113,"name":114,"slug":51,"createdAt":115,"updatedAt":115,"publishedAt":116},22,"e0nti57slk8t0ag21prw0zr2","YubiKey","2026-04-28T05:13:37.740Z","2026-04-28T05:13:39.579Z",{"id":118,"documentId":119,"name":120,"slug":51,"createdAt":121,"updatedAt":121,"publishedAt":122},4,"a4rfd7mimj8pupvxkq2pq24x","Yubico","2026-04-27T05:52:37.380Z","2026-04-27T05:52:38.764Z",{"id":124,"metaDescription":125},351,"Yubico's new 5.7 firmware is here. Discover the key changes, including expanded passkey and passwordless storage.",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":127},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 6a3.75 3.75 0 1 1-7.5 0a3.75 3.75 0 0 1 7.5 0M4.501 20.118a7.5 7.5 0 0 1 14.998 0A17.9 17.9 0 0 1 12 21.75c-2.676 0-5.216-.584-7.499-1.632\"\u002F>",1783406314774]