Yubikey
YubicoBitwardenGPG ToolsDonate Coffee
General
General
  • Introduction
    • Getting Started
    • Terms
    • FAQ
    • NFC vs FIPS
    • Securing Your Footprint
  • Tutorials
    • ⭕Bitwarden
    • ⭕Bitlocker
    • ⭕Code Signing
    • ⭕EFS
    • ⭕Github Desktop
    • ⭕KeePassXC
    • ⭕SSH + PuTTY-CAC
      • 🟣PIV-PKCS
      • 🟣PIV-CAPI
      • 🟣GPG
      • ⭕Configs
        • 📄gpg.conf
        • 📄gpg-agent.conf
        • 📄scdaemon.conf
    • ⭕Battle.net OTP
    • ⭕Steam OTP
    • ⭕Veracrypt
  • GUIDES
    • ⭕Setting up a New Key
      • 🟣Minimal Version
    • ⭕Securing Your Credentials
    • ⭕Setting up CLI / ykman
    • ⭕Setting up CLI / GPG
    • ⭕Mysterious Certificates
    • ⭕Understanding PINs
      • 🟣FIDO2
      • 🟣GPG
      • 🟣PIV
    • ⭕Yubikey Firmware
  • CHEATSHEETS
    • ⭕Environment Variables
    • ⭕Files/Abbreviations
    • ⭕OpenSSL
      • 🟣slot_9a.cnf
      • 🟣slot_9c.cnf
      • 🟣slot_9d.cnf
      • 🟣slot_9e.cnf
    • ⭕PEM Types
    • ⭕Usage Types
      • 🟣KeyUsage
      • 🟣KeyUsageProperty
      • 🟣extendedKeyUsage
      • 🟣KeyProtection
      • 🟣KeySpec
Powered by GitBook
On this page
  • ❊ What Is Firmware?
  • ❊ Yubikey Firmware
  • ❊ Upgrading Firmware
  • ❊ Newer Firmware
  • ❊ Checking Firmware
  • YUBIKEY MANAGER
  • YKMAN COMMAND-LINE

Was this helpful?

  1. GUIDES

Yubikey Firmware

Can you upgrade the firmware on your Yubikey? This section explains what firmware is, and what to do when your Yubikey becomes outdated.

PreviousPIVNextEnvironment Variables

Last updated 2 years ago

Was this helpful?

The latest version as of January 31, 2023 (first seen in July 2021) is:

❊ What Is Firmware?

Firmware is a specific class of computer software which provides low-level control for a device's specific hardware. Typically firmware is stored on EEPROM (electrically erasable programmable read-only memory), and is a type of non-volatile memory used in computers or computer related devices.

To get an idea of what makes up a Yubikey, a few of the known controller chips used to manufacturer Yubikeys have been provided below. These controller chips may vary depending on the type of Yubikey you've purchased, but it gives an idea as to what makes a Yubikey work.

Controller Chip
EEPROM / Flash
Device

76 kB

Yubikey 4

4 kB / 32kB

Yubikey 4

*< 500 kB

Yubikey 5

Fun Fact:

Current estimates on parts to make a Yubikey puts the manufacturing cost at roughly $5 - 6.00 USD.

*Note: Datasheets on the Infineon MCU for Yubikey 5 are very minimal. Info claims that the chip simply has 500kB of non-volatile memory and 16kB RAM (volatile). Yubikey 4 -> Yubikey 5 models went from a two controller chip setup to a single controller chip and switched chip manufacturers.

❊ Yubikey Firmware

The firmware in a Yubikey is included with the device itself, and is physically stored as programming within the EEPROM (or ROM -- ready-only memory). This firmware determines what features your Yubikey has and what it supports. Firmware is released by Yubico, which provides security improvements, as well as support for new features.

❊ Upgrading Firmware

The Yubikey itself contains non-upgradable firmware. This means that whatever firmware the Yubikey shipped with when you made your order, is the firmware you will keep. The reason for non-upgradable firmware is to prevent attacks on the YubiKey which might compromise its security.

❊ Newer Firmware

Due to the fact that a Yubikey's firmware is non-upgradable, if you see a press release announcing a new version of the firmware being released with a particular feature that you want, you will need to purchase a new Yubikey.

To ensure that you get the latest firmware, during the process of placing your order; you may include an order note with something similar to the following:

❊ Checking Firmware

To see what firmware your Yubikey is running, you can use the following methods:

YUBIKEY MANAGER

The software should take a few seconds to load, and display your firmware version on the far left side of the interface.

YKMAN COMMAND-LINE

Launch Command Prompt, Terminal, or Powershell.

Execute the command:

ykman info

The following information should show.

The highlighted area is the output for your current Yubikey firmware.

For an idea of how often firmware is released, firmware was released in May of 2021 with reports of v5.4.3 releasing to the public in July of 2021.

Launch

⭕
firmware
v5.4.3
v5.4
Yubikey Manager
NXP A7005
NXP LPC11U24FHI33/CP3303
Infineon SLE 78CLUFX5000P01
Provided by HexView - Yubikey 5