YubiKey NEO in production

Yubico Team

November 6, 2012  |  Yubico Team  |  22 Comments

YubiKey NEO + mobile + hands - blog

We know you have been waiting a long time for the production launch of our YubiKey NEO, and we are very happy to announce our plan to start shipping the production versions of the YubiKey NEO by December 10th. We are already accepting orders for the YubiKey NEO, so place your order today to get your full production sample of the NFC authentication token as soon as possible! And if you happen to be at CARTES in Paris this week, stop by the NXP booth where we will demonstrate the NEO.

The previous limitations of the beta version of the NEO have been addressed in the production version. The final version of the YubiKey NEO also includes a new secure element, enabling smart card/PKI functionality, which is certified for Common Criteria and the highest level of security. You can read more about all the new features here, as well as more about RFID and the YubiKey NEO.

We will naturally continue to expand and improve the YubiKey technology, so stay tuned for even more updates in the future!

22 Responses to “YubiKey NEO in production”

  1. Derrick says:

    So if I order the NEO from your store today (https://store.yubico.com/store/catalog/product_info.php?cPath=21&products_id=72) I will receive the full production unit, not the beta version. Correct?

  2. Will the NEO include a second slot? I recognize it would be hard to use NFC on the second slot, and that is fine. I just need the second slot for Truecrypt.

    Thanks,
    Dan

  3. Bob says:

    Can you please provide additional details regarding the new ‘smart card/PKI functionality’.

    • Yubico Team says:

      Hi Bob,
      The Yubikey NEO features a secure element co-processor with NFC and JavaCard functionality. Together with the standard Yubikey HID-keyboard communication, the NEO exposes what is known as a “composite device”, which means the NEO both acts as a HID keyboard and a CCID smartcard reader at the same time.

      This allows the NEO to work with existing smartcard- and Javacard infrastructure as well as an ordinary Yubikey with OTP.

      Yubico does not provide any Javacard- or PKI solutions, but we will over time share some Javacard code as open source. We will also provide links to relevant open source Javacard- and related projects to allow extension of NEO functionality. Please note that development of Javacard applets requires licensed software, not provided by Yubico.

  4. J says:

    Is it possible to use Truecypt with Neo PKI ?
    NEO Javacard is compatible with Truecrypt or not…?
    I do not want to use static password but PKI is very interesting

  5. KC says:

    I know that the iPhone/iPad products do not support NFC, but I notice that you mention some other methods of communication other than NFC. Do any of those work with the iPhone from a “touch the back of the phone” perspective?

    Keep up the good work. I own three Yubikeys (2 standard, 1 nano) and have not have any issues with them. Love it.

  6. Steven says:

    Is there a standard of waterproofing the NEO has reached?
    eg. https://en.wikipedia.org/wiki/IP_Code

  7. tom H says:

    What application will work on android phones.

    • David Maples says:

      Hello Tom,

      The YubiKey NEO already works with the Last Pass Mobile app on Android phones. In addition, it can be configured to pass static passwords as well as the Yubico OTPs over the NFC communication, using the Yubico NEO Demo app.

      -David Maples
      Yubico Technical Support

  8. Oliver says:

    Will YoubiKey NEO work on Windows Phone 8 Nokia Lumia 920 (and other WP8 phones) with the WP8 LastPass?

    • David Maples says:

      Hello Oliver,

      We have not tested the Nokia Windows 8 Phones yet with YubiKey NEO. However, they are high on our list of hardware to test the NEO against as they are a popular device.

      From the technical description, we feel that there are no obvious hardware barriers to using the YubiKey NEO’s NFC communications with the Nokia Lumia 920 Windows Phone 8, but again, that platform has not been verified in our offices and we currently do not officially support Windows 8 Phones.

      For LastPass application for Windows 8 Phones, it currently does not support the YubiKey NEO authentication, unlike their android mobile application. You will need to contact LastPass directly for more information.

      -David Maples
      Yubico Technical Support

  9. Fred says:

    Hi,

    Yubikey neo would embed a rsa javacard that could be accessible from an application on the smartphone.

    If this is correct:

    What kind of api is exposed on android or windows 8 to access the yubikey neojavacard via nfc in order :

    - To insert a specific javacard cardlet allowing to emulate a specific smartcard
    - To load rsa private key on the yubico neo javacard cardlet
    - To link that private key to a specific public key certificate emitted by a pki service.
    - To have the javacard execute rsa operations using the loaded private key, for example to generate the pkcs 1.5 signature on specific data.

    Thanks in advance for any information you could provide me on this very interesting product.

    • David says:

      The smartcard parts are accessible from android using the NFC APIs, specifically the IsoDep class. With windows 8 it’s most likely accessible as a standard PCSC device. We do not believe that on a Windows phone the smartcard parts are accessible at all.

      Inserting a javacard applet may be done with the GlobalPlatform tools, specifically gpshell if you have an applet and a Global Platform install file.

  10. elisa says:

    Hello,
    nice product. I wonder, how can the YubiKey NEO work with the mobile phone? Is there a battery inside? If I only use it with mobile phone and never with PC will it work or I have to charge the YubiKey NEO somehow? thanks in advance

    • David says:

      Hello Elisa!
      The YubiKey NEO does not use a battery – the NFC communications chip does not require one. It instead is powered by the NFC reader device; your NFC enabled mobile phone would generate more then enough power. You can keep using your NEO for as long as you want!

Leave a Reply

You must be logged in to post a comment.