# Install yubico-piv-tool with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget Command-line tool for the YubiKey PIV application. Version 2.7.3 via Homebrew; verified 2026-06-25. Also installable with debian: sudo apt install libykpiv-dev. ## Install ```sh sudo av install brew:yubico-piv-tool ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install yubico-piv-tool ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install yubico-piv-tool ``` Evidence: MacPorts ports tree: security/yubico-piv-tool/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add yubico-piv-tool ``` Evidence: Alpine Linux edge package indexes: yubico-piv-tool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install yubico-piv-tool ``` Evidence: Debian stable package indexes: yubico-piv-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install yubico-piv-tool ``` Evidence: Fedora Rawhide package metadata: yubico-piv-tool from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#yubico-piv-tool ``` Evidence: nixpkgs package indexes: pkgs/by-name/yu/yubico-piv-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S yubico-piv-tool ``` Evidence: Arch Linux sync databases: yubico-piv-tool from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install yubico-piv-tool ``` Evidence: openSUSE Tumbleweed package metadata: yubico-piv-tool from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/yubico-piv-tool ``` Evidence: Scoop official bucket manifest trees: bucket/yubico-piv-tool.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Yubico.PIVTool -e ``` Evidence: Windows Package Manager source index: Yubico.PIVTool from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:yubico-piv-tool - **Package manager:** Homebrew - **Version:** 2.7.3 - **Source summary:** Command-line tool for the YubiKey PIV application - **Homepage:** - **Last updated:** 2026-06-25T13:38:13+02:00 - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - yubico-piv-tool (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 2.7.3 ## Project history and usage Yubico PIV Tool is the command-line, library, and PKCS#11 toolchain for the YubiKey PIV application, packaged because it turns hardware-backed smart-card identity into scriptable Unix tooling. ### Project history Yubico’s PIV tooling grew from the YubiKey NEO/YubiKey 4 era when YubiKeys exposed a Personal Identity Verification smart-card interface compatible with NIST SP 800-73 concepts. The developer documentation describes PIV as enabling RSA or ECC signing and decryption with private keys stored on the smart card, exposed through interfaces such as PKCS#11. The project bundles several layers: the `yubico-piv-tool` command, the libykpiv library, and the YKCS11 PKCS#11 module. That combination made it useful both for direct provisioning tasks and for applications that already know how to talk PKCS#11. Over time, release notes show the project tracking newer YubiKey capabilities and platform integration needs: improved YKCS11 behavior, Windows/minidriver integration, firmware 5.7-era RSA3072/RSA4096, ED25519 and X25519 support, key deletion and movement, and expanded error handling. ### Adoption history Adoption followed enterprise and developer uses of YubiKeys as smart-card-like credentials: client certificates, SSH through PKCS#11, code signing, certificate requests, and hardware-backed private-key operations. Distribution packages often split the command-line tool, development library, and PKCS#11 module, reflecting its use both by humans and by other applications. Yubico’s own guides for SSH with PIV and PKCS#11 helped make the package a standard dependency in hardware-backed SSH setups before OpenSSH’s newer FIDO2 key types became widespread. Even with FIDO2 available, PIV remains relevant where certificate, PKCS#11, or smart-card interoperability is required. ### How it is used Users use `yubico-piv-tool` to generate keys on a YubiKey, import keys or certificates, create certificate signing requests, read and write PIV objects, inspect status, verify PINs, and test signatures. Applications can use YKCS11 when they need a PKCS#11 provider for the YubiKey PIV applet. For package users, the practical pattern is often: install the tool, initialize or inspect the PIV applet, provision slots such as 9a for authentication, and point OpenSSH, OpenSSL, Firefox, Java keytool, or another PKCS#11-aware consumer at the YKCS11 module. ### Why package nerds care This package is a bridge between hardware security tokens and the Unix package ecosystem. It is small on the surface, but it explains why smart-card support pulls in PC/SC, PKCS#11, OpenSSL, and vendor-specific libraries in real deployments. It also documents the hardware reality ponytail code usually cannot ignore: firmware capabilities matter, slots matter, PIN/PUK/management-key state matters, and package upgrades may unlock algorithms only when the physical YubiKey supports them. ### Timeline - 2014: Yubico copyright notices and forum activity show the PIV tool emerging in the YubiKey NEO/PIV era. - 2016: yubico-piv-tool 2.0.0 is discussed as a major YKCS11 release with a more complete PKCS#11 implementation. - 2017-2020: Linux distributions package yubico-piv-tool and YKCS11 for command-line and PKCS#11 use. - 2024-01-31: Version 2.5.0 adds firmware 5.7-era support for RSA3072/RSA4096, ED25519, X25519, key deletion, and key movement. - 2026-01-20: Version 2.7.3 release notes include X25519 ECDH work and Windows/minidriver usability improvements. ### Related projects - Related projects include YubiKey Manager, YKCS11, libykpiv, OpenSC, OpenSSH, OpenSSL, p11-kit, PC/SC Lite, piv-go, yubikey-agent, PIV standards, and NIST SP 800-73. ### Sources - - - - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Other Package-Manager Records - Debian apt - libykpiv-dev - 2.7.1-1: normalized package name match | Debian stable package indexes: libykpiv-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development files for the YubiKey PIV Library | https://developers.yubico.com/yubico-piv-tool/ - Debian apt - libykpiv2 - 2.7.1-1: normalized package name match | Debian stable package indexes: libykpiv2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Library for communication with the YubiKey PIV smartcard | https://developers.yubico.com/yubico-piv-tool/ - Debian apt - ykcs11 - 2.7.1-1: normalized package name match | Debian stable package indexes: ykcs11 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | PKCS#11 module for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - Debian apt - yubico-piv-tool - 2.7.1-1: normalized package name match | Debian stable package indexes: yubico-piv-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Command line tool for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - Nix - yubico-piv-tool: normalized package name match | nixpkgs package indexes: pkgs/by-name/yu/yubico-piv-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libykpiv-dev - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libykpiv-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Development files for the YubiKey PIV Library | https://developers.yubico.com/yubico-piv-tool/ - Ubuntu apt - libykpiv2 - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libykpiv2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Library for communication with the YubiKey PIV smartcard | https://developers.yubico.com/yubico-piv-tool/ - Ubuntu apt - ykcs11 - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: ykcs11 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | PKCS#11 module for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - Ubuntu apt - yubico-piv-tool - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: yubico-piv-tool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Command line tool for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - apk - yubico-piv-tool - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-dev - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (development files) | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-doc - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (documentation) | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-libs - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (libraries) | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-static - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (static library) | https://developers.yubico.com/yubico-piv-tool - dnf - yubico-piv-tool - 2.7.3-5.fc45: normalized package name match | Fedora Rawhide package metadata: yubico-piv-tool from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Tool for interacting with the PIV applet on a YubiKey | https://developers.yubico.com/yubico-piv-tool/ - dnf - yubico-piv-tool-devel - 2.7.3-5.fc45: normalized package name match | Fedora Rawhide package metadata: yubico-piv-tool-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Tool for interacting with the PIV applet on a YubiKey | https://developers.yubico.com/yubico-piv-tool/ ## Combined YAML source View the package source record on GitHub. [combined/yubico-piv-tool.yml](https://github.com/mxcl/pkgdb/blob/main/combined/yubico-piv-tool.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph