Import Smart Card Certificates onto your YubiKey
...Follow the steps detailed below to import your smart card certificates onto your YubiKey using your preferred version of YubiKey Manager. If you already have your smart card certificate stored on your YubiKey, skip to the next section: Smart Card Certificate Provisioning....
https://docs.yubico.com/software/yubikey/tools/authenticator/auth-guide/smartc-import-certificates.html
Configure Certificates in Yubikey PIV Slots - SecureW2
...Learn how to configure Yubikey PIV slots for certificate-based authentication, attestation, and enterprise security integration....
https://www.securew2.com/blog/yubikey-piv-certificate-slot-configuration
4. Generating Keys and Certificates for the Yubikey
...The only use for the X.509 certificate is to satisfy PIV/PKCS #11 lib. It needs to be able to extract the public-key from the smartcard, and to do that through the X.509 certificate....
https://docs.k9.io/key9-identity/ssh/installation-and-setup/windows-yubikey-smartcard-piv-instructions/4.-generating-keys-and-certificates-for-the-yubikey
Cert Base Authentication Using Yubikey - Microsoft Q&A
...We have manually installed the updated YubiKey Mini driver, and following this installation, we are able to successfully enroll the certificate from the MMC console using the YubiKey and PIN....
https://learn.microsoft.com/en-us/answers/questions/5508638/cert-base-authentication-using-yubikey
Smart card deployment: Manually importing user certificates
...Due to a CVE vulnerability (CVE 2020 0601), Microsoft has disabled the ability to import ECC certificates into a smart card via certutil. Manual importing of RSA certificates via certutil is still supported....
https://support.yubico.com/hc/en-us/articles/360015668799-Smart-card-deployment-Manually-importing-user-certificates
Key Usage and Extended Key Usage for X.509 Certificares on Yubikey
...I want to deploy X.509 certificates onto a Yubikey into the certificate slots. (see Yubico: PIV Introduction - Certificate Slots) according to the PIV Standard. I plan to let the Yubikey create a CSR, then issue a certificate with OpenSSL and import the final certificate onto the Yubikey....
https://security.stackexchange.com/questions/276998/key-usage-and-extended-key-usage-for-x-509-certificares-on-yubikey
Configure & Test Issuance of Certificate using Yubico's YubiKey | PKI ...
...This how-to article explains how to configure a DigiCert PKI Platform certificate profile to enforce the use of Yubico's YubiKey to store/manage a certificate that can then be used for smart card logon....
https://knowledge.digicert.com/solution/how-to-configure-and-test-issuance-of-certificate-using-yubico-s
Certificate slots - Yubico
...Slot 9e: Card Authentication This certificate and its associated private key is used to support additional physical access applications, such as providing physical access to buildings via PIV-enabled door locks. The end user PIN is NOT required to perform private key operations for this slot....
https://developers.yubico.com/PIV/Introduction/Certificate_slots.html
r/yubikey on Reddit: Multiple smartcard logon certificates for ...
...Multiple smartcard logon certificates for different domains on a single yubikey possible? As the title says, we have 4 different domains and are trying to implement yubikey to them. Currently we only use it in one....
https://www.reddit.com/r/yubikey/comments/yrf1ja/multiple_smartcard_logon_certificates_for/
YubiKey smart card deployment guide
...This document covers the basic steps required to set up an Active Directory domain environment for smart card authentication, including considerations before provisioning YubiKeys for smart card login....
https://support.yubico.com/hc/en-us/articles/360013707820-YubiKey-smart-card-deployment-guide