OATH Specifics
For an overview of the OATH features that became available with the 5.7.x and later firmware, see 5.7 - 5.6 Firmware Specifics.
The OATH application can store up to 64 OATH credentials on firmware 5.7.0 and later (32 on older firmware), either OATH-TOTP (time-based One-Time Password) or OATH-HOTP (counter-based One-Time Password). These credentials are separate from those stored in the OTP application, and can only be accessed through the CCID channel. In order to manage these credentials and read the OTPs generated by the YubiKey, requires the Yubico Authenticator.
To restrict access to the OTPs, set an access code for the OATH application.
Note
Developers: Using the OATH application functions on iOS requires the Yubico iOS SDK.
Note
The OTP and OATH categories overlap. Technically, there are three true OTPs:
We support:
- Yubico OTP and OATH-HOTP directly on the touch-triggered OTP function on the YubiKey.
- OATH-HOTP and OATH-TOTP directly on the OATH function on the YubiKey (usually called OATH and used with Yubico Authenticator).
- Static password and Challenge-Response with Touch-triggered OTP. Challenge-Response can also be used with software (such as Yubico Authenticator) to act as a single OATH-TOTP credential.
All three of these OTPs are described in more detail; see OATH Specifics and OTP Specifics.
HOTP and TOTP
Both OATH-TOTP and OATH-HOTP credentials are described in detail in the OATH Overview.