.. yk5-fips-5.4.rst

.. _fips-5.4-label:

================================================
YubiKey Firmware 5.4 Changes
================================================

For a description of the FIPS-specific aspects of the YubiKey 5 FIPS Series with the 5.7.4 firmware, see :ref:`yk5-fips-140-3-label`.

The table below lists the YubiKey 5 FIPS Series with the 5.4 firmware configuration changes that are set at programming. These are in addition to the configuration options available in the YubiKey 5 FIPS Series.

.. table:: **YubiKey 5 FIPS Series 5.4 Firmware Configuration Changes**
   :class: longtable

   +---------------------+-----------------------------------------------------+
   |Configuration Change |Description                                          |
   +=====================+=====================================================+
   |Functional           | | Enforce power-up self-test (firmware integrity and|
   |                     | | algorithm testing)                                |
   +---------------------+-----------------------------------------------------+
   | | Minimum PIN length|6 alphanumeric characters                            |
   | | for FIDO2         |                                                     |
   +---------------------+-----------------------------------------------------+
   | | Identification    | | Unique AAGUIDs for the FIDO Attestation           |
   | | (FIDO)            | | See **AAGUID Values** in :ref:`fips-aaguid-forms`.|
   +---------------------+-----------------------------------------------------+
   |Attestation (FIDO)   | | Attestation certificates for FIDO include         |
   |                     | | a FIPS OID (1.3.6.1.4.1.41482.12)                 |
   +---------------------+-----------------------------------------------------+
   |FIDO ``GETINFO``     | | Command returns a listing of FIPS certificates    |
   |                     | | applicable to the specific authenticator.         |
   |                     | | See :ref:`fips-fido-auth-certs`.                  | 
   +---------------------+-----------------------------------------------------+
   |Attestation (PIV)    | | Attestation certificates for PIV include          |
   |                     | | the FIPS Form Factor identifier** in the          |
   |                     | | Form Factor OID (1.3.6.1.4.1.41482.3.9)           |
   +---------------------+-----------------------------------------------------+
   |YubiKey Manager      | | Form factor identifies FIPS Series devices.       |
   |                     | | See :ref:`fips-aaguid-forms`.                     |
   +---------------------+-----------------------------------------------------+