Symantec VIP Enabled YubiKey
Login to PayPal with YubiKey
Yubico is proud to announce a YubiKey pre-configured with a Symantec VIP credential. There are many sites that support two factor authentication using Symantec VIP today including PayPal, eBay, Merrill Lynch, T Mobile. Now you can use the YubiKey format to secure your access to those sites.
How to associate VIP YubiKey with PayPal: Watch Video
We have made a short video here of the YubiKey with a Symantec VIP credential being associated with a PayPal account to implement two factor authentication.
Please note: A VIP YubiKey is identified by the VIP service by a Token ID. Your token ID is of the form "UBHE01234567". It must be the 4 characters "UBHE" plus the numeric decimal serial number of the YubiKey padded with zeros to the left 8 Digits. So if your serial number if "123456", the Token ID is "UBHE00123456".
OATH Authentication
The VIP enabled YubiKey is configured for the OATH standard, including a 6 digit One Time Password. The VIP does not come with a Yubico OTP identity pre-loaded to work with YubiCloud or Yubico demo sites, however you can add one later.
Order Online
You can order a VIP enabled YubiKey here. Please check the service you want to use is supported in your country (for example, we believe PayPal does not yet support two-factor authentication with VIP everywhere, for example, Denmark). In this initial partnership between Symantec and Yubico, Yubico offers the YubiKey at retail price, including shipment and support for individual users. The long term goal is to have the YubiKey sold by e-services supporting Symantec VIP.
Dual Identity Option
The VIP enabled YubiKey comes with its configuration password set to ensure the VIP credential is not accidentally overwritten as it cannot be recovered. The second identity slot is open and can be configured for either a Yubico OTP using the AES Key Upload Service, or with a static password. If you really do want to overwrite the VIP credential, the password is the same as the serial number (8 digits laser etched onto the key). If you are unclear about this paragraph - please refer to the Yubico manual on the documentation page.
Availability
Paypal's authentication service is currently available only to users registered in Australia, Germany, Canada, the United Kingdom and the United States.
Resynchronizing your VIP YubiKey
If your VIP YubiKey stops being accepted by the VIP service it may need re-synchronizing. This can happen if several codes are generated that are not sent to the VIP service for validation. Please go here for re-synchronization. A short video of the process is shownhere.
