YubiKey Smart Card Minidriver User Guide

Contents

• Introduction
• YKMD Features
• YKMD Installation
• Manual Installation
  • MSI File Install
    • Command Line MSI Install
  • CAB File Install
• Automated Installation
  • Installing via Group Policy Object
  • Preparing the Deployment Environment
  • Creating the Driver Store
  • Method 1 - Auto-Install via Startup Script
    • Create the Minidriver Zip File
    • Create the PowerShell Script
    • Configure the GPO
    • Edit YKMD Deploy GPO
  • Method 2 - Standard User Install (Manual Update)
    • Preparing YKMD for Distribution
    • Configure the GPO
      • Create a new GPO
    • Client Registry Setting
      • Update device path
      • Create new Registry
      • Update New Registry
    • Whitelisting the YKMD GUID
      • Locate the GUID of YKMD
      • Enable and Configure Group Policy
  • Completing the Installation
    • Issue a Group Policy Update
• Verifying Installation
  • Verify Installation Using Powershell
• Self-Enrolling YubiKeys on Windows
• Working with Enterprise Root Certificates
  • Adding an Enterprise Root Certificate to the YubiKey
  • Manually Delete Certificates
• Setting PIN Unblock Code (PUK)
  • Set or Change Smart Card PIN
  • Unblock a Blocked PIN
• Setting Touch Policy
  • Set Policy for Touch to Allow Private Key Use
  • Touch Policy Options
• Configure the Minidriver Registry
  • YubiKey Minidriver Registry Key Reference
• Logging Minidriver Behavior
• Uninstall the YubiKey Minidriver
  • YubiKey Minidriver Installed using MSI
  • Manual Uninstall
  • Preventing Reinstallation after Removal
• Copyright
  • Trademarks
  • Disclaimer
  • Contact Information
  • Document Updated