Modes of Purchase

YubiEnterprise Services is a set of services that enable organizations to efficiently procure, rapidly distribute, and remotely manage YubiKey strong authentication solutions at scale.

All YubiKeys are part of one or more product tiers. Products can be added to your inventory as subscription purchase of product tiers, or non-subscription perpetual outright purchase of products. You can purchase directly from Yubico, or through a reseller.

The exact numbers and models of YubiKeys the end users of your organization will want or need can be difficult to predict. With a YubiEnterprise Subscription you can purchase YubiKey licenses through an end user-based subscription model. With a subscription you only have to estimate the number of end users and the security key functionality requirements for your organization. You can then select preferred YubiKeys over time, with replacement and upgrade options as needs evolve.

The different purchasing options are described in more detail in the following.

Tier Options

A tier is a collection of YubiKey models representing a level within a hierarchy of product sets. All YubiKeys are part of one or more product tiers associated with subscription plans. For more information, see Subscriptions.

Subscription plans include the following tiers:

Base - includes the Security Key Series, FIDO-only support.
Advanced - includes YubiKey 5 Series, multi-protocol support.
Compliance - includes all certified YubiKeys, multi-protocol support, and YubiKey Bio on request.

Key Models Per Tier

The following provides an overview of available YubiKey models in each subscription tier.

Note

Enterprise subscription tiers are additive. For example, if you select Advanced tier, you can also request YubiKeys from the Base tier. If you select Compliance Tier, you can also request YubiKeys from the Base or Advanced tier.

MODEL	TIER
MODEL	Base	Advanced	Compliance
Security Key NFC by Yubico	X	X	X
Security Key C NFC by Yubico	X	X	X
Security Key NFC - Enterprise Edition	X	X	X
Security Key C NFC - Enterprise Edition	X	X	X
YubiKey 5 NFC		X	X
YubiKey 5C NFC		X	X
YubiKey 5C		X	X
YubiKey 5 Nano		X	X
YubiKey 5C Nano		X	X
YubiKey 5Ci		X	X
YubiKey 5 Nano FIPS			X
YubiKey 5C FIPS			X
YubiKey 5C Nano FIPS			X
YubiKey 5 NFC FIPS			X
YubiKey 5C NFC FIPS			X
YubiKey 5Ci FIPS			X

Security Key - Enterprise Edition

These are black FIDO-only NFC/C NFC, NFC/C NFC Enterprise Edition YubiKeys with serial numbers.

YubiKey Bio Series

YubiKey Bio Series - FIDO Edition (YubiKey Bio - FIDO Edition and YubiKey C Bio - FIDO Edition) is an optional add-on to any Subscription tier.
YubiKey Bio Series - Multi-protocol Edition (YubiKey Bio - Multi-protocol Edition and YubiKey C Bio - Multi-protocol Edition) is an optional add-on to the Advanced and Compliance Subscription tiers.

Plans and Features

Yubico Enterprise Plans lets you optimize features and purchasing model for your organization.

Consider the following when selecting a plan:

What are the security requirements for your organization, for example regarding compliance and the type of systems and services you need to secure?
What authentication capabilities, authentication protocols, and certification options will you be needing?
Which services will you need to be able to efficiently deploy YubiKeys in your organization?
Will you be deploying YubiKeys to internal employees only, or will you extend this to your partners and/or customers?
How quickly are you hoping to complete the roll-out - is there a compelling event that requires additional services?

Yubico offers the YubiKey as a Service (YaaS) plans Enterprise Plus and Enterprise Standard with included features and benefits as described in the following.

Enterprise Plus Plan

Replacement licenses - up to 25% each year included for the term period, for example 75% replacement users spread over 3 years.
Backup licenses - 25% discount per backup license on price per user.
Bulk customizations - 2 bulk programming events/year included.
Yubico Enrollment Suite with FIDO Pre-reg - included.
Professional Services - includes a credit of 5% of purchase price, can be applied to any Professional Services packages.
YubiEnterprise Services - all services included.

Enterprise Standard Plan

Replacement licenses - purchased à la carte at the time of the purchase and added to the monthly contract.
Backup licenses - 10% discount per backup licenses on price per user.
Bulk customizations - $1 per user per year and 1 bulk programming event/year included.
Yubico Enrollment Suite with FIDO Pre-reg - not available.
Professional Services - à la carte pricing.
YubiEnterprise services - YubiEnterprise Delivery service only.

All plans

Flexibility to choose YubiKey models (form factors).
Discounted backup licenses to secure your backup authentication and enable easy self-service account recovery
Extended warranty, covers the initial term of the subscription plus the first renewal.
Priority Technical Support 24x7x365.
Dedicated Customer Success Manager.
Security Key - Enterprise Edition.
YubiKey Bio included in Compliance, optional add-on to Base and Advanced tiers.

Additional Benefits

The following lists additional benefits that are part of the Enterprise Plans.

Customizations.

YubiKeys can be customized, for example pre-programmed to meet specific needs. The Enterprise Plus includes two bulk programming orders per year, and the standard plan includes one where you can order multiple YubiKeys pre-programmed per your organizations’ requirements.

Yubico Enrollment Suite

The Yubico Enrollment Suite offering, part of the Enterprise Plus plan, includes the following:

FIDO Pre-reg - order pre-registered YubiKeys and have them shipped directly to end users, ready to be used for authentication.
YubiEnroll - lets organizations’ own IT admins pre-enroll YubiKeys themselves and deliver the YubiKeys to end users, ready to be used for authentication.

YubiEnterprise Delivery

Includes distribution logistics management for automated ordering and delivery of YubiKeys to your end users or office locations. Using the YubiEnterprise Delivery service you can ship YubiKeys to 175 countries and 24 territories around the world. For destinations and shipping rates, see Destinations and Quantities.

YubiEnterprise Services Console

Use the intuitive YubiEnterprise Console web user interface to manage your YubiEnterprise services. You can check your purchase orders and inventory, create and monitor shipment requests, and manage your customizations.

Support Services

All plans include a dedicated Customer Success Manager and Priority Technical 24x7x365 Support for all Severity 1 and Severity 2 issues. Professional Services are offered to build your solution and help deploy YubiKeys in your organization (5% of purchase price for Plus plan, à la carte pricing for Standard plan).

Co-Terming

Yubico supports co-terming for YubiEnterprise Services, allowing organizations to add users and services at any time during the term of the subscription. An initial subscription must be present to start the co-term program. The added users and/or services will have the same term end date as the original subscription.

Subscriptions

A subscription combines at least one product tier (Base - Advanced - Compliance) and a plan (Plus or Standard). The product tiers enable a subset of YubiKeys, for example 5-series from which you can choose any key in that or a lesser tier.

Product tiers and plans can be combined as follows:

Base tier with Plus plan
Base tier with Standard plan
Advanced tier with Plus plan
Advanced tier with Standard plan
Compliance tier with Plus plan
Compliance tier with Standard plan

All subscription plans include Replacement and Backup YubiKey licenses. For more information, see Licenses.

The subscription automatically renews for original subscription term length unless one party provides the other party with written notice of non-renewal at least 30 days prior to the end of the current term. For detailed information, see Yubico Terms & Conditions.

Licenses

A license is an entitlement which allows an end user to use a YubiKey for business purposes for the organization that purchased the subscription. With licenses you can select the desired YubiKey model for your different end users as the need arises for your organization.

A subscription contains a certain number of YubiKey licenses that are charged at a fixed price per license and end user.

In general, licenses are of the following type:

Primary - refers to the number of active (primary) users. A subscription with 500 users will have 500 primary licenses where each of the 500 users are entitled to use a YubiKey of their choice..
Replacement - granted to a new user. For example, a new hire replacing an employee who left the organization. The employee that left is allowed to keep their YubiKey and continue using it for personal use. The new employee takes over the primary license and is granted their own YubiKey via the Replacement license.
Backup - granted to a primary user needing 2 or more YubiKeys. It is a separate license because Yubico provides either a 10% or 25% discount when 2 or more keys are supplied to the same user. A backup license also applies to replacement YubiKeys in a situation where an existing employee leaves and takes their 2 keys with them, and the new employee requires 2 new YubiKeys.

For more information on license usage, see Examples.

Examples

With the Enterprise Plus and Enterprise Standard subscription plans, you get access to the YubiEnterprise Services Console web user interface. Your product purchases become available as inventories (“buckets”) on your Dashboard in the Console, from where you can conveniently create shipment requests to deliver the YubiKeys to your end users.

The following provides an example of a purchasing scenario. The example explains the display of subscriptions and associated inventory in the Console user interface, and how to use the different product inventories when distributing YubiKey licenses to your end users.

Purchasing scenario

You want to deploy YubiKeys to 1000 end users in your organization. 600 of your users need multi-protocol security keys. For the other 400 users, FIDO-only security keys are sufficient. You want all of your users to have two YubiKeys in case one is lost. This means you need 2000 YubiKeys in total.

You purchase an Enterprise Plus subscription plan with the following:

For the 600 users that need multi-protocol security keys, you purchase 1200 (two per user) YubiKey licenses from the Advanced Plus Primary tier. When ordering YubiKeys for these users, you can choose between the key models (form factors) available in the Advanced tier. This is what this inventory looks like in the Console:

For the 400 users that need FIDO-only security keys, you purchase 800 (two per user) YubiKey licenses from the Base Plus Primary tier. When ordering YubiKeys for these users, you can choose between the key models (form factors) available in the Base tier. This is what this inventory looks like in the Console:

Since you have an Enterprise Plus subscription plan, you are entitled to annually upgrade 25% of the licenses in each tier as Replacement inventory, for example to cover for employee turnover or lost YubiKeys.

In this scenario, 300 Advanced Plus Primary Replacement licenses, and 200 Base Plus Primary Replacement licenses are included in the per user price and can be deployed when events occur typically some employees leave and some new employees join, but also in cases like lost or stolen keys.

Your inventory now looks like this in the Console:

With the Enterprise Plus subscription plan, you are entitled to a 25% discount per Backup license price per user. If you take advantage of this you would typically provide a backup key to 100% of your users, but you can also do a smaller subset.

These inventories look like this in the Console:

With an Enterprise Standard subscription plan, you would have purchased the Replacement licenses with à la carte pricing. Backup licenses would have been available at 10% discount on the à la carte price, per backup YubiKey user license.

With a Perpetual (non-subscription) purchase, you would have purchased 2000 YubiKey models specified at purchase time. Replacement and Backup YubiKey licenses would be charged at à la carte pricing at the time of purchase.

License usage

When creating shipment requests in the YubiEnterprise Console, you will be able to select from all your available inventory. Based on the previous purchasing example, available options when creating a shipment request in the Console will look like this:

In this example, the recommended license usage is the following:

Advanced - Plus - Primary: Choose this inventory for the initial deployment of YubiKeys to the 600 users that need YubiKeys (two per user) from the Advanced tier.
Advanced - Plus - Primary - Replacement: Choose this inventory to replace lost YubiKeys, provide YubiKeys to new employees, or provide an upgraded YubiKey to users that need YubiKeys from the Advanced tier.
Advanced - Plus - Backup: Choose this inventory to provide a backup YubiKey for self-service account recovery for users that need YubiKeys from the Advanced tier.
Base - Plus - Primary: Choose this inventory for the initial deployment of YubiKeys to the 400 users that need YubiKeys (two per user) from the Base tier.
Base - Plus - Primary - Replacement: Choose this inventory to replace lost YubiKeys, provide YubiKeys to new employees, or provide an upgraded YubiKey to users that need YubiKeys from the Base tier.
Base - Plus - Backup: Choose this inventory to provide a backup YubiKey for self-service account recovery for users that need YubiKeys from the Base tier.

Note

If you have inventory from a Subscription 1.0 purchase (legacy), you might also see inventory of type Initial and Buffer.

Accessories

Yubico products also include accessories, for example lanyards, keyports and key covers that can be shipped to your end users together with YubiKeys. Accessories can currently only be ordered through the Perpetual (non-subscription) purchase. However, they can be paired with a subscription license. For example, a Primary Plus primary user may be granted a YubiKey 5 NFC YubiKey and a YubiKey cover which can be added to the same shipment.

For more information, see Perpetual Purchasing.

Perpetual Purchasing

While the Enterprise and Standard plans offer the most comprehensive and best value choice pricing over 3 years with additional entitlements included, you also have the option to outright purchase YubiKeys using the non-subscription Perpetual option.

Purchasing a set number of specified models of key on a perpetual basis assumes that you know exactly how many end users you will have, as well as how many and what kinds of keys those end users will need. It also assumes that you have accurately estimated your employee turnover rate, and the number of end users who will lose their keys.

The following service availability applies for Perpetual purchasing:

YubiKeys form factors - specified at purchase time.
Replacement YubiKey licenses - only à la carte pricing.
Backup YubiKey licenses - only à la carte pricing.
YubiEnterprise Services - only YubiEnterprise Delivery.
YubiEnterprise Console - only with YubiEnterprise Delivery services.
Professional Services - only à la carte pricing (no included 5% credit).
Priority Technical Support - basic, no default SLA. Priority support pricing à la carte ($15,000 list price per year).
Bulk programming events - only à la carte pricing (the greater of $10,000 or $5 per YubiKey).

Inventory for products (YubiKeys and accessories) purchased through the Perpetual option is displayed under Available physical products on the Dashboard in the YubiEnterprise Console. From here you can create shipment requests for YubiKeys (and accessories).

Purchasing through Resellers

The entity through which a purchase order is submitted is referred to as a channel partner. This can be Yubico itself (direct sale), or a reseller or distributor doing business with Yubico.

The YubiEnterprise Console Dashboard shows your total inventory of any given product, combining quantities purchased from all sources, both directly from Yubico and indirectly through resellers.

Inventory is sorted according to the source from which it was purchased. When creating a shipment request, you can choose from inventory purchased directly from Yubico, or through a distributor/reseller associated with your organization. Whether purchased directly or through a distributor/reseller, you have access to the same services, for example the ability to automatically fulfill licenses with YubiKeys through the YubiEnterprise Console or the API.

To find out what is in which inventory, check your purchase orders. The reseller name and ID can be viewed in the Purchase order detail page.

Purchasing Workflow

The subscription contract is a signed order form that covers Yubico terms and supersedes all other documents, followed by a purchase order (PO), which is required for invoicing and payment. The start date of the subscription determines when the annual replenishment of the Replacement inventory takes place. The PO must include an email address for the customer, and distributor or reseller where applicable.

As soon as a PO is accepted, it is entered into the YubiEnterprise Delivery system. You can then access the YubiEnterprise Console to review quantities of YubiKeys purchased, and create shipment requests for delivery of YubiKeys to your end users.

To file a support ticket for YubiEnterprise Delivery, click Support.