How-To: View Your Security Key Details with Keytos Connect

Learn how to view your security key’s details in Keytos Connect, including its model, serial number, the smart card certificates in each key slot, and its FIDO2 passkeys.

Overview - What Can I See About My Security Key?

Keytos Connect shows you what’s on your security key, such as a YubiKey: its model and serial number, the smart card certificates your organization installed, and its FIDO2 passkeys. This is useful when your IT team asks for your key’s serial number, or when you want to check when your certificate expires.

Before You Begin

  1. Install Keytos Connect on your computer. You can find the download links on the Keytos Connect overview page.
  2. Open Keytos Connect and sign in with your work or school account.
  3. Plug your security key into your computer.

Step-by-Step Guide - How to View Your Security Key Details in Keytos Connect

Step 1 - How to Open Your Security Key Details

  1. On the Identity management page, check the Model and Serial number of your security key. The badge next to it shows whether the key is Connected or Blocked. If it’s blocked, see how to unblock your security key.

  2. Click About this key.

    Keytos Connect Identity management page showing a connected YubiKey 5 USB C NFC with its model and serial number, and About this key highlighted

Step 2 - How to View the Smart Card Certificates on Your Key

  1. On the Security key credentials page, keep Smart card certificates selected.

  2. Under Key slot, choose the slot you want to see. Authentication (9a) holds the certificate you use to sign in.

    Keytos Connect Security key credentials page with Smart card certificates selected and the Key slot set to Authentication (9a), showing the certificate issuer, name, and dates

  3. Review the certificate in that slot:

    • Issuer: The Certificate Authority that issued the certificate, for example your organization’s Keytos Shield CA.
    • Simple name: Who the certificate belongs to, usually your work or school email address.
    • Creation date and Expiration date: When the certificate was issued and when it stops working.

To see a certificate in a different slot, open the Key slot drop-down and choose another slot. Your key can hold certificates in these slots:

  • Authentication (9a): Signing in to your computer, apps, and websites.
  • Signing (9c): Digitally signing documents and email.
  • Key Management (9d): Encrypting email and files.
  • Card Authentication (9e): Physical access, such as door readers.
  • Retired 01 (82) and up: Older encryption certificates kept so you can still open files you encrypted in the past.

Most slots are empty unless your organization uses them.

Keytos Connect Key slot drop-down showing Authentication (9a), Signing (9c), Key Management (9d), Card Authentication (9e), and Retired slots

Step 3 - How to View the Passkeys on Your Key

  1. Click FIDO2 passkeys.

  2. Under Enter PIN, enter your security key’s FIDO2 PIN (at least 4 characters), and then click See FIDO2 passkeys to see the passkeys stored on your key.

    Keytos Connect Security key credentials page with FIDO2 passkeys selected and the Enter PIN box highlighted above the See FIDO2 passkeys button

  3. Review each passkey on your key:

    • Name: The name of the account the passkey belongs to.
    • Website: Where you use the passkey to sign in, for example login.microsoft.com for your Microsoft work or school account.
    • Identity: The account the passkey signs in as, usually your work or school email address.
    Keytos Connect FIDO2 passkeys tab showing a passkey with its name, the login.microsoft.com website, and the user's identity

  4. When you’re done, click Back to return to the Identity management page.