Automic VaultAutomic Vault

brew

yubico-piv-tool を Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget でインストール

yubico-piv-tool のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install yubico-piv-tool

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install yubico-piv-tool

MacPorts ports tree · security/yubico-piv-tool/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add yubico-piv-tool

Alpine Linux edge package indexes · yubico-piv-tool · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install yubico-piv-tool

Debian stable package indexes · yubico-piv-tool · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install yubico-piv-tool

Fedora Rawhide package metadata · yubico-piv-tool · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#yubico-piv-tool

nixpkgs package indexes · pkgs/by-name/yu/yubico-piv-tool/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S yubico-piv-tool

Arch Linux sync databases · yubico-piv-tool · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install yubico-piv-tool

openSUSE Tumbleweed package metadata · yubico-piv-tool · ソース: download.opensuse.org

Windows

Scoop確認済み · 92%
scoop install main/yubico-piv-tool

Scoop official bucket manifest trees · bucket/yubico-piv-tool.json · ソース: api.github.com

Windows Package Manager確認済み · 92%
winget install --id Yubico.PIVTool -e

Windows Package Manager source index · Yubico.PIVTool · ソース: cdn.winget.microsoft.com

概要

パッケージ概要

Command-line tool for the YubiKey PIV application

コマンドとエイリアス

  • yubico-piv-tool

履歴

プロジェクトの歴史と使われ方

Yubico PIV Tool is the command-line, library, and PKCS#11 toolchain for the YubiKey PIV application, packaged because it turns hardware-backed smart-card identity into scriptable Unix tooling.

プロジェクトの歴史

Yubico’s PIV tooling grew from the YubiKey NEO/YubiKey 4 era when YubiKeys exposed a Personal Identity Verification smart-card interface compatible with NIST SP 800-73 concepts. The developer documentation describes PIV as enabling RSA or ECC signing and decryption with private keys stored on the smart card, exposed through interfaces such as PKCS#11.

The project bundles several layers: the `yubico-piv-tool` command, the libykpiv library, and the YKCS11 PKCS#11 module. That combination made it useful both for direct provisioning tasks and for applications that already know how to talk PKCS#11.

Over time, release notes show the project tracking newer YubiKey capabilities and platform integration needs: improved YKCS11 behavior, Windows/minidriver integration, firmware 5.7-era RSA3072/RSA4096, ED25519 and X25519 support, key deletion and movement, and expanded error handling.

採用の歴史

Adoption followed enterprise and developer uses of YubiKeys as smart-card-like credentials: client certificates, SSH through PKCS#11, code signing, certificate requests, and hardware-backed private-key operations. Distribution packages often split the command-line tool, development library, and PKCS#11 module, reflecting its use both by humans and by other applications.

Yubico’s own guides for SSH with PIV and PKCS#11 helped make the package a standard dependency in hardware-backed SSH setups before OpenSSH’s newer FIDO2 key types became widespread. Even with FIDO2 available, PIV remains relevant where certificate, PKCS#11, or smart-card interoperability is required.

使われ方

Users use `yubico-piv-tool` to generate keys on a YubiKey, import keys or certificates, create certificate signing requests, read and write PIV objects, inspect status, verify PINs, and test signatures. Applications can use YKCS11 when they need a PKCS#11 provider for the YubiKey PIV applet.

For package users, the practical pattern is often: install the tool, initialize or inspect the PIV applet, provision slots such as 9a for authentication, and point OpenSSH, OpenSSL, Firefox, Java keytool, or another PKCS#11-aware consumer at the YKCS11 module.

パッケージ好きにとっての重要性

This package is a bridge between hardware security tokens and the Unix package ecosystem. It is small on the surface, but it explains why smart-card support pulls in PC/SC, PKCS#11, OpenSSL, and vendor-specific libraries in real deployments.

It also documents the hardware reality ponytail code usually cannot ignore: firmware capabilities matter, slots matter, PIN/PUK/management-key state matters, and package upgrades may unlock algorithms only when the physical YubiKey supports them.

タイムライン

  • 2014: Yubico copyright notices and forum activity show the PIV tool emerging in the YubiKey NEO/PIV era.
  • 2016: yubico-piv-tool 2.0.0 is discussed as a major YKCS11 release with a more complete PKCS#11 implementation.
  • 2017-2020: Linux distributions package yubico-piv-tool and YKCS11 for command-line and PKCS#11 use.
  • 2024-01-31: Version 2.5.0 adds firmware 5.7-era support for RSA3072/RSA4096, ED25519, X25519, key deletion, and key movement.
  • 2026-01-20: Version 2.7.3 release notes include X25519 ECDH work and Windows/minidriver usability improvements.

Related projects

  • Related projects include YubiKey Manager, YKCS11, libykpiv, OpenSC, OpenSSH, OpenSSL, p11-kit, PC/SC Lite, piv-go, yubikey-agent, PIV standards, and NIST SP 800-73.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 1 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 5 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
yubico-piv-toolcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-25
マネージャ版2.7.3
マネージャ更新日2026-06-25
ローカルデータOK
上流not checked
検出された最新未検出

https://developers.yubico.com/yubico-piv-tool/

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:yubico-piv-tool
バージョン2.7.3
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/yubico-piv-tool
ホームページhttps://developers.yubico.com/yubico-piv-tool/
リポジトリhttps://github.com/Yubico/yubico-piv-tool
上流ドキュメントhttps://developers.yubico.com/PIV
ライセンスBSD-2-Clause
ソースアーカイブhttps://developers.yubico.com/yubico-piv-tool/Releases/yubico-piv-tool-2.7.3.tar.gz
最終更新2026-06-25T13:38:13+02:00
Pulseupdated
依存関係openssl@3
ビルド依存関係check, cmake, gengetopt, help2man, pkgconf
macOS 提供ライブラリpcsc-lite
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameyubico-piv-tool
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

libykpiv-dev 2.7.1-1

Development files for the YubiKey PIV Library

https://developers.yubico.com/yubico-piv-tool/

sudo apt install libykpiv-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: yubico-piv-tool
  • 1 依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libykpiv-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libykpiv2 2.7.1-1

Library for communication with the YubiKey PIV smartcard

https://developers.yubico.com/yubico-piv-tool/

sudo apt install libykpiv2
  • Section: libs
  • Architecture: amd64
  • Source Package: yubico-piv-tool
  • 4 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libykpiv2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

ykcs11 2.7.1-1

PKCS#11 module for the YubiKey PIV applet

https://developers.yubico.com/yubico-piv-tool/

sudo apt install ykcs11
  • Section: libs
  • Architecture: amd64
  • Source Package: yubico-piv-tool
  • 3 依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ykcs11 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

yubico-piv-tool 2.7.1-1

Command line tool for the YubiKey PIV applet

https://developers.yubico.com/yubico-piv-tool/

sudo apt install yubico-piv-tool
  • Section: utils
  • Architecture: amd64
  • 4 依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Debian stable package indexes · deb.debian.org · Debian stable package indexes: yubico-piv-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

yubico-piv-tool

nix profile install nixpkgs#yubico-piv-tool
  • normalized package name match
  • 一致条件: Yubico Piv Tool
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/yu/yubico-piv-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

libykpiv-dev 2.2.0-1.1build2

Development files for the YubiKey PIV Library

https://developers.yubico.com/yubico-piv-tool/

sudo apt install libykpiv-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: yubico-piv-tool
  • 1 依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libykpiv-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libykpiv2 2.2.0-1.1build2

Library for communication with the YubiKey PIV smartcard

https://developers.yubico.com/yubico-piv-tool/

sudo apt install libykpiv2
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: yubico-piv-tool
  • 3 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libykpiv2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

ykcs11 2.2.0-1.1build2

PKCS#11 module for the YubiKey PIV applet

https://developers.yubico.com/yubico-piv-tool/

sudo apt install ykcs11
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: yubico-piv-tool
  • 3 依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ykcs11 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

yubico-piv-tool 2.2.0-1.1build2

Command line tool for the YubiKey PIV applet

https://developers.yubico.com/yubico-piv-tool/

sudo apt install yubico-piv-tool
  • Section: universe/utils
  • Architecture: amd64
  • 3 依存関係
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: yubico-piv-tool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

yubico-piv-tool 2.7.3-r0

PIV Tools for yubikey

https://developers.yubico.com/yubico-piv-tool

sudo apk add yubico-piv-tool
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: yubico-piv-tool
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yubico-piv-tool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

yubico-piv-tool-dev 2.7.3-r0

PIV Tools for yubikey (development files)

https://developers.yubico.com/yubico-piv-tool

sudo apk add yubico-piv-tool-dev
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: yubico-piv-tool
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yubico-piv-tool-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

yubico-piv-tool-doc 2.7.3-r0

PIV Tools for yubikey (documentation)

https://developers.yubico.com/yubico-piv-tool

sudo apk add yubico-piv-tool-doc
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: yubico-piv-tool
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yubico-piv-tool-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

yubico-piv-tool-libs 2.7.3-r0

PIV Tools for yubikey (libraries)

https://developers.yubico.com/yubico-piv-tool

sudo apk add yubico-piv-tool-libs
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: yubico-piv-tool
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yubico-piv-tool-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

yubico-piv-tool-static 2.7.3-r0

PIV Tools for yubikey (static library)

https://developers.yubico.com/yubico-piv-tool

sudo apk add yubico-piv-tool-static
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: yubico-piv-tool
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yubico-piv-tool-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

yubico-piv-tool 2.7.3-1.fc44

Tool for interacting with the PIV applet on a YubiKey

https://developers.yubico.com/yubico-piv-tool/

sudo dnf install yubico-piv-tool
  • License: BSD-2-Clause
  • Category: Unspecified
  • Architecture: i686
  • Source Package: yubico-piv-tool
  • 6 依存関係
  • 3 提供
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: yubico-piv-tool from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

yubico-piv-tool-devel 2.7.3-1.fc44

Tool for interacting with the PIV applet on a YubiKey

https://developers.yubico.com/yubico-piv-tool/

sudo dnf install yubico-piv-tool-devel
  • License: BSD-2-Clause
  • Category: Unspecified
  • Architecture: i686
  • Source Package: yubico-piv-tool
  • 5 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Yubico Piv Tool
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: yubico-piv-tool-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • openssl@3Runtime dependency declared by Homebrew.
  • checkBuild dependency declared by Homebrew.
  • cmakeBuild dependency declared by Homebrew.
  • gengetoptBuild dependency declared by Homebrew.
  • help2manBuild dependency declared by Homebrew.

同じワークフロー

  • openscShares av.db curated category or tags: cli, pkcs11, security, smart-card.
  • yubikey-agentShares av.db curated category or tags: cli, piv, security, yubikey.
  • age-plugin-yubikeyShares av.db curated category or tags: cli, piv, security, yubikey.
  • gnupg-pkcs11-scdShares av.db curated category or tags: cli, pkcs11, security, smart-card.
  • pivitShares av.db curated category or tags: cli, piv, security, yubikey.
  • softhsmShares av.db curated category or tags: cli, pkcs11, security.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment