-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
KeePassXC can't communicate with YubiKey (wrong serial) #10656
Description
Overview
I have a new YubiKey 5C Nano (firmware 5.4.3). I have copied my keepass-database HMAC challenge to the new YubiKey. When I plug the YubiKey and try to login to my database, KeePassXC reports the wrong serial number for the hardware key and cannot interface with the hardware key.
Steps to Reproduce
- With YubiKey connected enter database password and attempt to unlock.
- The YubiKey is detected on the password unlock screen, but displays a wrong serial number.
- Receive error: "Error while reading the database: Unable to calculate database key: Could not find interface for hardware key with serial number [WRONG SERIAL NUMBER]"
- Additionally: clicking the Refresh Hardware Keys changes the reported hardware key serial number.
Expected Behavior
Login without difficulty.
Actual Behavior
Wrong YubiKey serial number, database remains locked.
Context
The new YubiKey is attached directly to the Macbook Air. KeePassXC does not run under a virtual machine. Installed from Homebrew. Several other YubiKeys work correctly on the same computer. The affected YubiKey works correctly on the same computer with other applications (PGP) and also with KeePass-databases on an Android phone with Keepass2Android v. 1.10-pre. The affected YubiKey is the only one connected to the Mac at the time of testing.
KeePassXC - Version 2.7.7
Revision: 68e2dd8
Qt 5.15.11
Debugging mode is disabled.
Operating system: macOS 13.6
CPU architecture: x86_64
Kernel: darwin 22.6.0
Enabled extensions:
- Auto-Type
- Browser Integration
- Passkeys
- SSH Agent
- KeeShare
- YubiKey
- Quick Unlock
Cryptographic libraries:
- Botan 3.1.1
NOTE:
Operating System: macOS