Yubikey certification location


I have paired my Yubikey with my mac. Pin has replaced my system password.

I want to check the certificate expiry date in Jamf Inventory. I do not see the concerned certificate in Jamf inventory/computer/certificates !! I do not see the Yubikey certificate in my keychain either !!

Any idea where the cert is stored ? How make it visible in Jamf ?


Contributor III

Use something like Smart Card Utility from the App Store to see the certificate(s) on the Yubikey, it will also show you when they expire.  I had to obtain 2 of the certs listed from our Cyber team to push to devices via a Config Profile, and I do see those in the inventory report for my machine in Certificates.


Smart Card Utility is paid app, isn't ? I haven't got exactly what you did to display yubikey cert info in Jamf inventory

Valued Contributor

You wont be able to see any of the yubikey information in jamf unless you build some sort of EA to read the certificate. The certs are on the yubikey, not the device. They're only available when you have the yubikey plugged in. And like @Jason33 said, it requires some tool like Smart Card Utility.


I can ran these commands in terminal with correct output.

Capture d’écran 2022-08-11 à 01.02.30.png

However, am not able to translate this in valid EA, any idea ?

Capture d’écran 2022-08-11 à 01.51.36.png

This EA is not working. What have is missed?


Capture d’écran 2022-08-11 à 02.10.41.png

 this works in terminal as sh file not as EA!