Certificates: PIV

Add and manage certificates

To add a certificate to one of the PIV application slots, do the following:

  1. Plug your YubiKey into your device, click the menu icon in the upper left corner of the app, and select Certificates.

    To connect via NFC on desktop, click the NFC icon in Yubico Authenticator and place your YubiKey on top of a desktop NFC reader. The key must maintain constant contact with the reader throughout the operation.

    _images/certificates.jpg
  2. Select a slot and click Import file under Actions.

    To find the Actions menu in a narrow app window, click the three dots in the upper right corner of the app.

  3. Enter the PIV management key when prompted and click Unlock.

  4. Select the certificate file on your device and click Choose (or similar).

Manage the PIN, PUK, and Management Key

To change the PIN, do the following:

  1. Plug your YubiKey into your device, click the menu icon in the upper left corner of the app, and select Certificates.

    To connect via NFC on desktop, click the NFC icon in Yubico Authenticator and place your YubiKey on top of a desktop NFC reader. The key must maintain constant contact with the reader throughout the operation.

  2. Select Change PIN under Manage.

    To find the Manage menu in a narrow app window, click the three dots in the upper right corner of the app.

  3. Enter your current PIN.

  4. Enter a new PIN (6-8 characters).

  5. Enter the new PIN again to confirm and click Save.

    _images/change-piv-pin.jpg