# Install yubico-piv-tool with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper Command-line tool for the YubiKey PIV application. Version 2.7.3 via Homebrew; verified 2026-06-25. ## Install ```sh sudo av install brew:yubico-piv-tool ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install yubico-piv-tool ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install yubico-piv-tool ``` Evidence: MacPorts ports tree: security/yubico-piv-tool/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add yubico-piv-tool ``` Evidence: Alpine Linux edge package indexes: yubico-piv-tool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install libykpiv-dev ``` Evidence: Debian stable package indexes: libykpiv-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install yubico-piv-tool ``` Evidence: Fedora Rawhide package metadata: yubico-piv-tool from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#yubico-piv-tool ``` Evidence: nixpkgs package indexes: pkgs/by-name/yu/yubico-piv-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S yubico-piv-tool ``` Evidence: Arch Linux sync databases: yubico-piv-tool from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install libykcs11-2 ``` Evidence: openSUSE Tumbleweed package metadata: libykcs11-2 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/yubico-piv-tool ``` Evidence: Scoop official bucket manifest trees: bucket/yubico-piv-tool.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Yubico.PIVTool -e ``` Evidence: Windows Package Manager source index: Yubico.PIVTool from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:yubico-piv-tool - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.7.3 - **Source summary:** Command-line tool for the YubiKey PIV application - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** BSD-2-Clause - **Source archive:** - **Last updated:** 2026-06-25T13:38:13+02:00 - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - yubico-piv-tool (cli) - yubico-piv-tool (alias) ## Dependencies - openssl@3 ## Build dependencies - check - cmake - gengetopt - help2man - pkgconf ## Uses from macOS - pcsc-lite ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.7.3 - Package-manager updated: 2026-06-25 - Local data: ok - Upstream repository: https://developers.yubico.com/yubico-piv-tool/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage Yubico PIV Tool is the command-line, library, and PKCS#11 toolchain for the YubiKey PIV application, packaged because it turns hardware-backed smart-card identity into scriptable Unix tooling. ### Project history Yubico’s PIV tooling grew from the YubiKey NEO/YubiKey 4 era when YubiKeys exposed a Personal Identity Verification smart-card interface compatible with NIST SP 800-73 concepts. The developer documentation describes PIV as enabling RSA or ECC signing and decryption with private keys stored on the smart card, exposed through interfaces such as PKCS#11. The project bundles several layers: the `yubico-piv-tool` command, the libykpiv library, and the YKCS11 PKCS#11 module. That combination made it useful both for direct provisioning tasks and for applications that already know how to talk PKCS#11. Over time, release notes show the project tracking newer YubiKey capabilities and platform integration needs: improved YKCS11 behavior, Windows/minidriver integration, firmware 5.7-era RSA3072/RSA4096, ED25519 and X25519 support, key deletion and movement, and expanded error handling. ### Adoption history Adoption followed enterprise and developer uses of YubiKeys as smart-card-like credentials: client certificates, SSH through PKCS#11, code signing, certificate requests, and hardware-backed private-key operations. Distribution packages often split the command-line tool, development library, and PKCS#11 module, reflecting its use both by humans and by other applications. Yubico’s own guides for SSH with PIV and PKCS#11 helped make the package a standard dependency in hardware-backed SSH setups before OpenSSH’s newer FIDO2 key types became widespread. Even with FIDO2 available, PIV remains relevant where certificate, PKCS#11, or smart-card interoperability is required. ### How it is used Users use `yubico-piv-tool` to generate keys on a YubiKey, import keys or certificates, create certificate signing requests, read and write PIV objects, inspect status, verify PINs, and test signatures. Applications can use YKCS11 when they need a PKCS#11 provider for the YubiKey PIV applet. For package users, the practical pattern is often: install the tool, initialize or inspect the PIV applet, provision slots such as 9a for authentication, and point OpenSSH, OpenSSL, Firefox, Java keytool, or another PKCS#11-aware consumer at the YKCS11 module. ### Why package nerds care This package is a bridge between hardware security tokens and the Unix package ecosystem. It is small on the surface, but it explains why smart-card support pulls in PC/SC, PKCS#11, OpenSSL, and vendor-specific libraries in real deployments. It also documents the hardware reality ponytail code usually cannot ignore: firmware capabilities matter, slots matter, PIN/PUK/management-key state matters, and package upgrades may unlock algorithms only when the physical YubiKey supports them. ### Timeline - 2014: Yubico copyright notices and forum activity show the PIV tool emerging in the YubiKey NEO/PIV era. - 2016: yubico-piv-tool 2.0.0 is discussed as a major YKCS11 release with a more complete PKCS#11 implementation. - 2017-2020: Linux distributions package yubico-piv-tool and YKCS11 for command-line and PKCS#11 use. - 2024-01-31: Version 2.5.0 adds firmware 5.7-era support for RSA3072/RSA4096, ED25519, X25519, key deletion, and key movement. - 2026-01-20: Version 2.7.3 release notes include X25519 ECDH work and Windows/minidriver usability improvements. ### Related projects - Related projects include YubiKey Manager, YKCS11, libykpiv, OpenSC, OpenSSH, OpenSSL, p11-kit, PC/SC Lite, piv-go, yubikey-agent, PIV standards, and NIST SP 800-73. ### Sources - - - - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** yubico-piv-tool - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - libykpiv-dev - 2.7.1-1: normalized package name match | Debian stable package indexes: libykpiv-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development files for the YubiKey PIV Library | https://developers.yubico.com/yubico-piv-tool/ - Debian apt - libykpiv2 - 2.7.1-1: normalized package name match | Debian stable package indexes: libykpiv2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Library for communication with the YubiKey PIV smartcard | https://developers.yubico.com/yubico-piv-tool/ - Debian apt - ykcs11 - 2.7.1-1: normalized package name match | Debian stable package indexes: ykcs11 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | PKCS#11 module for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - Debian apt - yubico-piv-tool - 2.7.1-1: normalized package name match | Debian stable package indexes: yubico-piv-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Command line tool for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - Nix - yubico-piv-tool: normalized package name match | nixpkgs package indexes: pkgs/by-name/yu/yubico-piv-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libykpiv-dev - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libykpiv-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Development files for the YubiKey PIV Library | https://developers.yubico.com/yubico-piv-tool/ - Ubuntu apt - libykpiv2 - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libykpiv2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Library for communication with the YubiKey PIV smartcard | https://developers.yubico.com/yubico-piv-tool/ - Ubuntu apt - ykcs11 - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: ykcs11 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | PKCS#11 module for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - Ubuntu apt - yubico-piv-tool - 2.2.0-1.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: yubico-piv-tool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Command line tool for the YubiKey PIV applet | https://developers.yubico.com/yubico-piv-tool/ - apk - yubico-piv-tool - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-dev - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (development files) | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-doc - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (documentation) | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-libs - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (libraries) | https://developers.yubico.com/yubico-piv-tool - apk - yubico-piv-tool-static - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: yubico-piv-tool-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | PIV Tools for yubikey (static library) | https://developers.yubico.com/yubico-piv-tool - dnf - yubico-piv-tool - 2.7.3-1.fc44: normalized package name match | Fedora Rawhide package metadata: yubico-piv-tool from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Tool for interacting with the PIV applet on a YubiKey | https://developers.yubico.com/yubico-piv-tool/ - dnf - yubico-piv-tool-devel - 2.7.3-1.fc44: normalized package name match | Fedora Rawhide package metadata: yubico-piv-tool-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Tool for interacting with the PIV applet on a YubiKey | https://developers.yubico.com/yubico-piv-tool/ ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [check](https://www.automicvault.com/pkg/brew/check/) - Build dependency declared by Homebrew. - [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew. - [gengetopt](https://www.automicvault.com/pkg/brew/gengetopt/) - Build dependency declared by Homebrew. - [help2man](https://www.automicvault.com/pkg/brew/help2man/) - Build dependency declared by Homebrew. - [opensc](https://www.automicvault.com/pkg/brew/opensc/) - Shares av.db curated category or tags: cli, pkcs11, security, smart-card. - [yubikey-agent](https://www.automicvault.com/pkg/brew/yubikey-agent/) - Shares av.db curated category or tags: cli, piv, security, yubikey. - [age-plugin-yubikey](https://www.automicvault.com/pkg/brew/age-plugin-yubikey/) - Shares av.db curated category or tags: cli, piv, security, yubikey. - [gnupg-pkcs11-scd](https://www.automicvault.com/pkg/brew/gnupg-pkcs11-scd/) - Shares av.db curated category or tags: cli, pkcs11, security, smart-card. - [pivit](https://www.automicvault.com/pkg/brew/pivit/) - Shares av.db curated category or tags: cli, piv, security, yubikey. - [softhsm](https://www.automicvault.com/pkg/brew/softhsm/) - Shares av.db curated category or tags: cli, pkcs11, security. - [ykman](https://www.automicvault.com/pkg/brew/ykman/) - Shares av.db curated category or tags: cli, security, yubikey. - [ykpers](https://www.automicvault.com/pkg/brew/ykpers/) - Shares av.db curated category or tags: cli, security, yubikey. - [libfido2](https://www.automicvault.com/pkg/brew/libfido2/) - Security-sensitive metadata or terminology overlaps. Shared terms: authentication, cli, hardware, openssl, openssl-3. ## Combined YAML source View the package source record on GitHub. [combined/yubico-piv-tool.yml](https://github.com/automic-vault/db/blob/main/combined/yubico-piv-tool.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph