Subcommands83 subcommands
ykman info
Displays information about the attached YubiKey such as serial number, firmware version, capabilities, etc
ykman list
List connected YubiKeys
ykman config
Enable or disable applications
ykman config mode
Manage connection modes (USB Interfaces)
ykman config nfc
Enable or disable applications over NFC
ykman config set-lock-code
Set or change the configuration lock code
ykman config usb
Enable or disable applications over USB
ykman fido
Manage the FIDO applications
ykman fido info
Display general status of the FIDO2 application
ykman fido reset
Reset all FIDO applications. This action will wipe all FIDO credentials, including FIDO U2F credentials, on the YubiKey and remove the PIN code
ykman fido access
Manage the PIN for FIDO
ykman fido access change-pin
Set or change PIN code
ykman fido access verify-pin
Verify the PIN against a YubiKey
ykman fido credentials
Manage discoverable (resident) credentials. This command lets you manage credentials stored on your YubiKey. Credential management is only available when a FIDO PIN is set on the YubiKey
ykman fido credentials delete
Delete a credential
ykman fido credentials list
List credentials
ykman fido fingerprints
Manage fingerprints
ykman fido fingerprints add
Add a new fingerprint
ykman fido fingerprints delete
Delete a fingerprint. Delete a fingerprint from the YubiKey by its ID, which can be seen by running the "list" subcommand
ykman fido fingerprints list
List registered fingerprint. Lists fingerprints by ID and (if available) label
ykman fido fingerprints rename
Set the label for a fingerprint
ykman oath
Manage the OATH applications
ykman oath info
Display general status of OATH application
ykman oath reset
Reset all OATH data. This action will delete all accounts and restore factory settings for the OATH application on the YubiKey
ykman oath access
Manage password protection for OATH
ykman oath access change
Change the password used to protect OATH accounts. Alows you to set or change a password that will be required to access the OATH accounts stored on the YubiKey
ykman oath access forget
Remove a stored password from this computer
ykman oath access remember
Store the YubiKeys password on this computer to avoid having to enter it on each use
ykman oath accounts
Manage and use OATH accounts
ykman oath accounts add
Add a new account
ykman oath accounts code
Generate codes
ykman oath accounts delete
Delete an account
ykman oath accounts list
List all accounts
ykman oath accounts rename
Rename an account (Requires YubiKey 5.3 or later)
ykman oath accounts uri
Add a new account from an otpauth:// URI
ykman openpgp
Manage the OpenPGP applications
ykman openpgp info
Display general status of the OpenPGP application
ykman openpgp reset
Reset all the OpenPGP data
ykman openpgp access
Manage PIN, Reset Code, and Admin PIN
ykman openpgp access set-retries
Set PIN, Reset Code and Admin PIN retries
ykman openpgp certificates
Manage certificates
ykman openpgp certificates delete
Delete an OpenPGP certificate
ykman openpgp certificates export
Export an OpenPGP certificate
ykman openpgp certificates import
Import an OpenPGP certificate
ykman openpgp keys
Manage private keys
ykman openpgp keys attest
Generate a attestation certificate for a key. Attestation is used to show that an asymmetric key was generated on the YubiKey and therefore doesn't exist outside the device
ykman openpgp keys import
Import a private key (ONLY SUPPORTS ATTESTATION KEY)
ykman openpgp keys set-touch
Set touch policy for OpenPGP key
ykman otp
Manage the YubiOTP applications
ykman otp calculate
Perform a challenge-response operation. Send a challenge (in hex) to a YubiKey slot with a challenge-response credential, and read the response. Supports output as a OATH-TOTP code
ykman otp chalresp
Program a challenge-response operation
ykman otp delete
Deletes the configuration stored in a slot
ykman otp hotp
Program an HMAC-SHA1 OATH-HOTP credential
ykman otp info
Display general status of the YubiKey OTP slots
ykman otp ndef
Configure a slot to be used over NDEF (NFC)
ykman otp settings
Update the settings for a slot
ykman otp static
Configure a static password
ykman otp swap
Swaps the two slot configurations
ykman otp yubiotp
Program a Yubico OTP credential
ykman piv
Manage the PIV applications
ykman piv info
Display general status of the PIV application
ykman piv reset
Reset all PIV data
ykman piv access
Manage PIN, PUK, and Management Key
ykman piv access change-management-key
Change the management key
ykman piv access change-pin
Change the PIN code
ykman piv access change-puk
Change the PUK code
ykman piv access set-retries
Set the number of PIN and PUK retry attempts
ykman piv access unblock-pin
Unblock the PIN (using PUK)
ykman piv certificates
Manage certificates
ykman piv certificates delete
Delete a certificate
ykman piv certificates export
Export an X.509 certificate
ykman piv certificates generate
Generate a self-signed X.509 certificate
ykman piv certificates import
Import an X.509 certificate
ykman piv certificates request
Generate a Certificate Signing Request (CSR)
ykman piv keys
Manage private keys
ykman piv keys attest
Generate an attestation certificate for a key pair
ykman piv keys export
Export a public key corresponding to a stored private key
ykman piv keys generate
Generate an asymmetric key pair
ykman piv keys import
Import a private key from file
ykman piv objects
Manage PIV data objects
ykman piv objects export
Export an arbitrary PIV data object
ykman piv objects generate
Generate and write data for a supported data object
ykman piv objects import
Write an arbitrary PIV object
