Recommended sequence of enrollment steps

YubiKeys enrollment should always be performed in an order that ensures a logical sequence.

Structure of the sequence

– Selection of functions via USB or NFC

– Preparation, update or confirmation of PIV or FIDO2

– The corresponding measures follow directly after each one.

– OTP

Example: First YubiKeys enrollments:

– USB applications (with at least PIV, FIDO2 and CCID)

– NFC applications

– PIV reset

– Certificate-based authentication / Certificate import

– FIDO reset

– Passwordless authentication

– FIDO2 Sync

– OTP Slot 1

– OTP Slot 2

Example: Changing PIN information:

Login information update

Example: Changing, renewing, or adding credentials:

– USB applications (with at least PIV, FIDO2 and CCID)

– NFC applications

– PIV input

– Certificate-based authentication / Certificate import

– Passwordless authentication

– FIDO2 Sync