macOS
Homebrew已验证 · 100%
brew install yubico-piv-toollocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install yubico-piv-toolMacPorts ports tree · security/yubico-piv-tool/Portfile · 来源: api.github.com
安装
其他安装命令
Linux
Alpine Linux apk已验证 · 92%
sudo apk add yubico-piv-toolAlpine Linux edge package indexes · yubico-piv-tool · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install yubico-piv-toolDebian stable package indexes · yubico-piv-tool · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install yubico-piv-toolFedora Rawhide package metadata · yubico-piv-tool · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#yubico-piv-toolnixpkgs package indexes · pkgs/by-name/yu/yubico-piv-tool/package.nix · 来源: api.github.com
Arch Linux pacman已验证 · 92%
sudo pacman -S yubico-piv-toolArch Linux sync databases · yubico-piv-tool · 来源: geo.mirror.pkgbuild.com
openSUSE zypper已验证 · 92%
sudo zypper install yubico-piv-toolopenSUSE Tumbleweed package metadata · yubico-piv-tool · 来源: download.opensuse.org
Windows
Scoop已验证 · 92%
scoop install main/yubico-piv-toolScoop official bucket manifest trees · bucket/yubico-piv-tool.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id Yubico.PIVTool -eWindows Package Manager source index · Yubico.PIVTool · 来源: cdn.winget.microsoft.com
概览
软件包摘要
Command-line tool for the YubiKey PIV application
项目链接
命令和别名
- yubico-piv-tool
历史
项目历史与用法
Yubico PIV Tool is the command-line, library, and PKCS#11 toolchain for the YubiKey PIV application, packaged because it turns hardware-backed smart-card identity into scriptable Unix tooling.
项目历史
Yubico’s PIV tooling grew from the YubiKey NEO/YubiKey 4 era when YubiKeys exposed a Personal Identity Verification smart-card interface compatible with NIST SP 800-73 concepts. The developer documentation describes PIV as enabling RSA or ECC signing and decryption with private keys stored on the smart card, exposed through interfaces such as PKCS#11.
The project bundles several layers: the `yubico-piv-tool` command, the libykpiv library, and the YKCS11 PKCS#11 module. That combination made it useful both for direct provisioning tasks and for applications that already know how to talk PKCS#11.
Over time, release notes show the project tracking newer YubiKey capabilities and platform integration needs: improved YKCS11 behavior, Windows/minidriver integration, firmware 5.7-era RSA3072/RSA4096, ED25519 and X25519 support, key deletion and movement, and expanded error handling.
采用历史
Adoption followed enterprise and developer uses of YubiKeys as smart-card-like credentials: client certificates, SSH through PKCS#11, code signing, certificate requests, and hardware-backed private-key operations. Distribution packages often split the command-line tool, development library, and PKCS#11 module, reflecting its use both by humans and by other applications.
Yubico’s own guides for SSH with PIV and PKCS#11 helped make the package a standard dependency in hardware-backed SSH setups before OpenSSH’s newer FIDO2 key types became widespread. Even with FIDO2 available, PIV remains relevant where certificate, PKCS#11, or smart-card interoperability is required.
使用方式
Users use `yubico-piv-tool` to generate keys on a YubiKey, import keys or certificates, create certificate signing requests, read and write PIV objects, inspect status, verify PINs, and test signatures. Applications can use YKCS11 when they need a PKCS#11 provider for the YubiKey PIV applet.
For package users, the practical pattern is often: install the tool, initialize or inspect the PIV applet, provision slots such as 9a for authentication, and point OpenSSH, OpenSSL, Firefox, Java keytool, or another PKCS#11-aware consumer at the YKCS11 module.
为什么软件包爱好者会关心
This package is a bridge between hardware security tokens and the Unix package ecosystem. It is small on the surface, but it explains why smart-card support pulls in PC/SC, PKCS#11, OpenSSL, and vendor-specific libraries in real deployments.
It also documents the hardware reality ponytail code usually cannot ignore: firmware capabilities matter, slots matter, PIN/PUK/management-key state matters, and package upgrades may unlock algorithms only when the physical YubiKey supports them.
时间线
- 2014: Yubico copyright notices and forum activity show the PIV tool emerging in the YubiKey NEO/PIV era.
- 2016: yubico-piv-tool 2.0.0 is discussed as a major YKCS11 release with a more complete PKCS#11 implementation.
- 2017-2020: Linux distributions package yubico-piv-tool and YKCS11 for command-line and PKCS#11 use.
- 2024-01-31: Version 2.5.0 adds firmware 5.7-era support for RSA3072/RSA4096, ED25519, X25519, key deletion, and key movement.
- 2026-01-20: Version 2.7.3 release notes include X25519 ECDH work and Windows/minidriver usability improvements.
Related projects
- Related projects include YubiKey Manager, YKCS11, libykpiv, OpenSC, OpenSSH, OpenSSL, p11-kit, PC/SC Lite, piv-go, yubikey-agent, PIV standards, and NIST SP 800-73.
来源
- https://developers.yubico.com/PIV/Guides/SSH_with_PIV_and_PKCS11.html
- https://developers.yubico.com/yubico-piv-tool/
- https://developers.yubico.com/yubico-piv-tool/Release_Notes.html
- https://developers.yubico.com/yubico-piv-tool/YKCS11/
- https://developers.yubico.com/yubico-piv-tool/YubiKey_PIV_introduction.html
- https://docs.yubico.com/software/yubikey/tools/pivtool/Introduction.html
- https://packages.debian.org/sid/i386/ykcs11
- https://packages.debian.org/sid/utils/yubico-piv-tool
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
yubico-piv-tool | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本2.7.3
管理器更新时间2026-06-25
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:yubico-piv-tool |
|---|---|
| 版本 | 2.7.3 |
| 软件包管理器 | Homebrew |
| 主页 | https://developers.yubico.com/yubico-piv-tool/ |
| 最后更新 | 2026-06-25T13:38:13+02:00 |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
libykpiv-dev 2.7.1-1
Development files for the YubiKey PIV Library
https://developers.yubico.com/yubico-piv-tool/
sudo apt install libykpiv-dev- Section: libdevel
- Architecture: amd64
- Source Package: yubico-piv-tool
- 1 依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Debian apt95%
libykpiv2 2.7.1-1
Library for communication with the YubiKey PIV smartcard
https://developers.yubico.com/yubico-piv-tool/
sudo apt install libykpiv2- Section: libs
- Architecture: amd64
- Source Package: yubico-piv-tool
- 4 依赖
- 1 可选依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Debian apt95%
ykcs11 2.7.1-1
PKCS#11 module for the YubiKey PIV applet
https://developers.yubico.com/yubico-piv-tool/
sudo apt install ykcs11- Section: libs
- Architecture: amd64
- Source Package: yubico-piv-tool
- 3 依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Debian apt95%
yubico-piv-tool 2.7.1-1
Command line tool for the YubiKey PIV applet
https://developers.yubico.com/yubico-piv-tool/
sudo apt install yubico-piv-tool- Section: utils
- Architecture: amd64
- 4 依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Nix95%
yubico-piv-tool
nix profile install nixpkgs#yubico-piv-tool- normalized package name match
- 匹配方式：Yubico Piv Tool
Ubuntu apt95%
libykpiv-dev 2.2.0-1.1build2
Development files for the YubiKey PIV Library
https://developers.yubico.com/yubico-piv-tool/
sudo apt install libykpiv-dev- Section: universe/libdevel
- Architecture: amd64
- Source Package: yubico-piv-tool
- 1 依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Ubuntu apt95%
libykpiv2 2.2.0-1.1build2
Library for communication with the YubiKey PIV smartcard
https://developers.yubico.com/yubico-piv-tool/
sudo apt install libykpiv2- Section: universe/libs
- Architecture: amd64
- Source Package: yubico-piv-tool
- 3 依赖
- 1 可选依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Ubuntu apt95%
ykcs11 2.2.0-1.1build2
PKCS#11 module for the YubiKey PIV applet
https://developers.yubico.com/yubico-piv-tool/
sudo apt install ykcs11- Section: universe/libs
- Architecture: amd64
- Source Package: yubico-piv-tool
- 3 依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
Ubuntu apt95%
yubico-piv-tool 2.2.0-1.1build2
Command line tool for the YubiKey PIV applet
https://developers.yubico.com/yubico-piv-tool/
sudo apt install yubico-piv-tool- Section: universe/utils
- Architecture: amd64
- 3 依赖
- normalized package name match
- 匹配方式：Yubico Piv Tool
apk95%
yubico-piv-tool 2.7.3-r0
PIV Tools for yubikey
https://developers.yubico.com/yubico-piv-tool
sudo apk add yubico-piv-tool- License: BSD-2-Clause
- Architecture: x86_64
- Source Package: yubico-piv-tool
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Yubico Piv Tool
apk95%
yubico-piv-tool-dev 2.7.3-r0
PIV Tools for yubikey (development files)
https://developers.yubico.com/yubico-piv-tool
sudo apk add yubico-piv-tool-dev- License: BSD-2-Clause
- Architecture: x86_64
- Source Package: yubico-piv-tool
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Yubico Piv Tool
apk95%
yubico-piv-tool-doc 2.7.3-r0
PIV Tools for yubikey (documentation)
https://developers.yubico.com/yubico-piv-tool
sudo apk add yubico-piv-tool-doc- License: BSD-2-Clause
- Architecture: x86_64
- Source Package: yubico-piv-tool
- normalized package name match
- 匹配方式：Yubico Piv Tool
apk95%
yubico-piv-tool-libs 2.7.3-r0
PIV Tools for yubikey (libraries)
https://developers.yubico.com/yubico-piv-tool
sudo apk add yubico-piv-tool-libs- License: BSD-2-Clause
- Architecture: x86_64
- Source Package: yubico-piv-tool
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Yubico Piv Tool
apk95%
yubico-piv-tool-static 2.7.3-r0
PIV Tools for yubikey (static library)
https://developers.yubico.com/yubico-piv-tool
sudo apk add yubico-piv-tool-static- License: BSD-2-Clause
- Architecture: x86_64
- Source Package: yubico-piv-tool
- normalized package name match
- 匹配方式：Yubico Piv Tool
dnf95%
yubico-piv-tool 2.7.3-5.fc45
Tool for interacting with the PIV applet on a YubiKey
https://developers.yubico.com/yubico-piv-tool/
sudo dnf install yubico-piv-tool- License: BSD-2-Clause
- Category: Unspecified
- Architecture: i686
- Source Package: yubico-piv-tool
- 6 依赖
- 3 提供
- normalized package name match
- 匹配方式：Yubico Piv Tool
dnf95%
yubico-piv-tool-devel 2.7.3-5.fc45
Tool for interacting with the PIV applet on a YubiKey
https://developers.yubico.com/yubico-piv-tool/
sudo dnf install yubico-piv-tool-devel- License: BSD-2-Clause
- Category: Unspecified
- Architecture: i686
- Source Package: yubico-piv-tool
- 5 依赖
- 2 提供
- normalized package name match
- 匹配方式：Yubico Piv Tool
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation