Yubikey Authentication iPad/iOS26

Hey all,

Question for the masses....

Does the Yubikey authentication have a OS dependency and it only works with a stable, public OS? Does Azure/Okta/Yubikey beta OS26?

My CEO installed iPadOS 26 on his iPad and was not able to authenticate via Yubikey into our company environment. I ran the same scenario on my iPad using iPadOS 26 and I had the same results. Downgrading to iPAdOS doesn't pose these issues.

I'm assuming something isn't fine-tuned yet?

Answered by DTS Engineer in 851677022

I can’t offer specific advice about third-party products. However, in general, iOS supports hardware authentication tokens in one of two ways:

  • It has built-in support for various standard mechanisms, such as PIV smart cards.
  • The CryptoTokenKey (CTK) framework allows a third-party developer to create a CTK app extension (appex) that acts as a ‘driver’ for their token, allowing the system to talk to a completely custom token.

So, your path forward depends on which mechanism you’re using:

  • If you haven’t installed the vendor’s software, and are instead relying on the built-in support, you should file a bug about the iOS 26 beta.
  • If you’re relying on the vendor’s software, you should reach out to them about this issue.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

I can’t offer specific advice about third-party products. However, in general, iOS supports hardware authentication tokens in one of two ways:

  • It has built-in support for various standard mechanisms, such as PIV smart cards.
  • The CryptoTokenKey (CTK) framework allows a third-party developer to create a CTK app extension (appex) that acts as a ‘driver’ for their token, allowing the system to talk to a completely custom token.

So, your path forward depends on which mechanism you’re using:

  • If you haven’t installed the vendor’s software, and are instead relying on the built-in support, you should file a bug about the iOS 26 beta.
  • If you’re relying on the vendor’s software, you should reach out to them about this issue.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Yubikey Authentication iPad/iOS26
 
 
Q