General
FIPS validation	FIPS 140-2, overall level 1 and 2, physical security level 3
Authenticator security level	AAL3
Degree of protection	IP68
Authentication protocols	FIDO2/WebAuthn, FIDO U2F, Smartcard (PIV), Yubico OTP, OATH-TOTP, OATH-HOTP, OpenPGP, Challenge Response
Cryptographic algorithms	RSA 2048, ECC p256, ECC p384
Support	PKCS#11
Operating system compatibility	Microsoft Windows, Mac OS X, Linux, Chrome OS
Connection	USB-C
Country of manufacture	USA
Used as	PIV smart card

The YubiKey 5C FIPS is a hardware authenticator from Yubico, specifically designed for use in environments with high security requirements. It serves as a physical security key for multi-factor authentication and supports various authentication protocols. The device is validated according to FIPS 140-2, overall level 1 and 2, with physical security level 3, making it suitable for government agencies and regulated industries that must meet the requirements of Authenticator Security Level 3 (AAL3) as defined in the NIST SP800-63B guideline. The key is compact and designed for daily use, featuring a USB-C connector, making it suitable for modern devices.

Applications

The YubiKey 5C FIPS is intended for use in security-critical environments, particularly in public administration, finance, and other industries subject to strict data protection and authentication standards. It enables reliable, location-independent authentication, as it requires no battery or network connection. The IP68 protection rating makes it resistant to dust and water, allowing use outdoors or in harsh environments.

Features and Specifications in Detail

The authenticator provides one-touch authentication, where the user initiates login by simply touching the device. This reduces dependency on passwords and thereby lowers IT support costs, as password-related issues can be reduced by up to 92%. The device supports multiple authentication protocols on a single key, including FIDO2/WebAuthn, FIDO U2F, Smartcard (PIV), Yubico OTP, OATH-TOTP, OATH-HOTP, OpenPGP, and Challenge Response. This versatility enables flexible integration into existing systems.

Technology Explained Simply

The YubiKey 5C FIPS integrates a hardware-secure element that protects cryptographic keys and safeguards them against unauthorized access. The cryptographic algorithms used include RSA 2048, ECC p256, and ECC p384, ensuring high security standards. Support for PKCS#11 enables use in applications based on this standard. As a PIV smartcard, the device can also be used in systems relying on smartcard technology. A mini-driver for Windows is available to ensure compatibility.

Compatibility and Accessories

The device is compatible with Microsoft Windows, Mac OS X, Linux, Chrome OS, and common browsers. It supports USB-C connectors, making it suitable for modern laptops and devices. The YubiKey 5 FIPS series includes multiple form factors, with the Nano model designed for permanent insertion into a USB port. The series is also compatible with USB-A, NFC, and Lightning, ensuring broad applicability.

Installation and Mounting

Installation is performed by simply plugging the device into the USB-C port of the computer. Authentication is initiated by touching the device. No additional installation steps are required, as the device is plug-and-play. Compatibility with common operating systems and browsers simplifies integration into existing IT infrastructures.

Operational Advantages

The YubiKey 5C FIPS offers reliable, fast, and simple authentication without dependency on batteries or network connections. FIPS 140-2 validation and compliance with AAL3 requirements make it a trustworthy solution for security-critical applications. The IP68 protection rating ensures high robustness, and support for multiple protocols enables flexible use. Manufacturing in the USA ensures a controlled production chain.

Batteries are not included in the delivery scope.