# ykman mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für ykman in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:ykman
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install ykman
```

  Evidenz: local Homebrew formula metadata

## Paketfakten

- **Paketschlüssel:** brew:ykman
- **Paketmanager:** Homebrew
- **Paketmanager-Seite:** <https://formulae.brew.sh/formula/ykman>
- **Version:** 5.9.2
- **Quellzusammenfassung:** Tool for managing your YubiKey configuration
- **Homepage:** <https://developers.yubico.com/yubikey-manager/>
- **Repository:** <https://github.com/Yubico/yubikey-manager>
- **Upstream-Dokumentation:** <https://developers.yubico.com/yubikey-manager/>
- **Lizenz:** BSD-2-Clause
- **Quellarchiv:** <https://files.pythonhosted.org/packages/1f/ab/5b0671484bcdac6cf383ba6682626ab23478889fab5fe7a1744ed78a33c4/yubikey_manager-5.9.2.tar.gz>
- **Zuletzt aktualisiert:** 2026-07-01T17:34:10Z
- **Generiert:** 2026-08-04T22:13:35+00:00

## Executables

- ykman (cli)
- ykman (Alias)

## Abhängigkeiten

- cryptography
- python@3.14

## Build-Abhängigkeiten

- cmake
- swig

## Von macOS bereitgestellte Bibliotheken

- pcsc-lite

## Installationsverhalten

- Post-install-Hook: nicht definiert
- Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Version und Aktualität

- Seite generiert: 2026-08-04
- Manager-Version: 5.9.2
- Manager aktualisiert: 2026-07-01
- lokale Daten: OK
- Upstream-Repository: https://developers.yubico.com/yubikey-manager/
- Info: Release/tag comparison is only available for GitHub repositories.
## Projektgeschichte und Nutzung

YubiKey Manager CLI, usually run as `ykman`, is Yubico's maintained command-line and Python-library interface for configuring modern YubiKeys. It sits at the center of the current YubiKey administration stack because it manages multiple applications on the same hardware token, including FIDO, OATH, OpenPGP, OTP, and PIV.

### Projektgeschichte

The GitHub repository for yubikey-manager was created on 2016-07-04, after Yubico already had older, narrower tools for OTP personalization and related YubiKey tasks. The project consolidated YubiKey administration into a Python CLI/library that can talk to a YubiKey over the relevant USB interfaces instead of being limited to the original OTP personalization workflow.

Yubico's current developer page describes YubiKey Manager CLI as a Python 3.10-or-later library and command-line tool for configuring a YubiKey, and points GUI users to Yubico Authenticator. The separate user guide describes it as an advanced cross-platform tool and the premier CLI for advanced management of YubiKey applications.

### Adoptionsgeschichte

`ykman` became the practical successor for day-to-day YubiKey configuration as YubiKeys expanded beyond OTP into FIDO2/WebAuthn, PIV smart-card certificates, OATH credentials, OpenPGP, and other applets. Its Homebrew, MacPorts, pip/pipx/uv, Windows installer, Linux package, and FreeBSD port paths reflect a tool meant for developers, admins, and security teams rather than only one operating system.

In the YubiKey ecosystem, adoption is also explained by deprecation pressure: Yubico has announced end-of-life dates for the older YubiKey Personalization package, while YubiKey Manager continues to track newer firmware and application capabilities.

### Wie es verwendet wird

Typical usage starts with `ykman list` or `ykman info`, then moves into application-specific subcommands such as `ykman fido`, `ykman oath`, `ykman openpgp`, `ykman otp`, and `ykman piv`. It is used to inspect tokens, configure applications, manage credentials or certificates, reset applets, and script YubiKey fleet setup from a terminal.

Package users should think of `ykman` as hardware administration tooling, not a passive client: commands can change security-sensitive state on a physical token, and some platforms require USB HID, smart-card, or input-monitoring permissions for particular YubiKey interfaces.

### Warum Paket-Nerds sich dafür interessieren

`ykman` is package-nerd significant because it is where modern hardware-token support becomes ordinary package-manager plumbing: a Python CLI, platform-specific USB and smart-card access, shell completion, native installers, and OS packages all wrap one small executable that configures real cryptographic hardware.

It also shows the maintenance arc of security-device tooling. Old single-purpose C utilities remain historically important, but the package that users now expect to install is the cross-application manager that follows current firmware and authentication standards.

### Zeitleiste

- 2016-07-04: Yubico creates the yubikey-manager GitHub repository.
- 2020s: YubiKey Manager CLI becomes Yubico's documented advanced cross-platform CLI for current YubiKey applications.
- 2025-02-19: Yubico announces end of life for the older YubiKey Personalization package, strengthening `ykman` as the maintained path for newer YubiKey management.
- 2026: Yubico documentation describes ykman as supporting features of current YubiKey firmware and applications including FIDO2, PIV, OTP, OpenPGP, OATH, Security Domain, and YubiHSM Auth.

### Related projects

- YubiKey Personalization / ykpers is the older OTP-focused personalization library and CLI.
- Yubico Authenticator is Yubico's GUI-oriented application for users who do not want the CLI.
- Related Yubico tools and protocols include yubico-c, libfido2, python-fido2, PIV, OpenPGP, OATH, YubiOTP, FIDO2, and WebAuthn.

### Quellen

- <https://api.github.com/repos/Yubico/yubikey-manager>
- <https://developers.yubico.com/yubikey-manager/>
- <https://developers.yubico.com/yubikey-personalization/>
- <https://docs.yubico.com/software/yubikey/tools/ykman/intro.html>
- <https://github.com/Yubico/yubikey-manager>


## Sicherheitshinweise

narrow executable package without higher-risk signals.

- **Geiger-Risiko:** grün / niedrig
- narrow executable package without higher-risk signals

## Details aus der Quelldatenbank

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** ykman
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable


## Verwandte Links

- [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://pkg.so/de/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://pkg.so/de/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [python@3.14](https://pkg.so/de/brew/python-3-14/) - Runtime dependency declared by Homebrew.
- [cmake](https://pkg.so/de/brew/cmake/) - Build dependency declared by Homebrew.
- [swig](https://pkg.so/de/brew/swig/) - Build dependency declared by Homebrew.
- [yubikey-agent](https://pkg.so/de/brew/yubikey-agent/) - Shares pkgdb curated category or tags: cli, hardware-token, security, yubikey.
- [yubico-piv-tool](https://pkg.so/de/brew/yubico-piv-tool/) - Shares pkgdb curated category or tags: cli, security, yubikey.
- [ykpers](https://pkg.so/de/brew/ykpers/) - Shares pkgdb curated category or tags: cli, security, yubikey.
- [tkey-ssh-agent](https://pkg.so/de/brew/tkey-ssh-agent/) - Shares pkgdb curated category or tags: cli, hardware-token, security.
- [gnutls](https://pkg.so/de/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security.
- [krb5](https://pkg.so/de/brew/krb5/) - Shares pkgdb curated category or tags: cli, security.
- [nettle](https://pkg.so/de/brew/nettle/) - Shares pkgdb curated category or tags: cli, security.
- [libcap](https://pkg.so/de/brew/libcap/) - Shares pkgdb curated category or tags: cli, security.
- [pam-u2f](https://pkg.so/de/brew/pam-u2f/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, hardware, hardware-token, security, token.
- [libfido2](https://pkg.so/de/brew/libfido2/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, hardware, security, token.

## Combined YAML source

View the package source record on GitHub. [combined/ykman.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ykman.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph
