差異處

這裏顯示兩個版本的差異處。

連向這個比對檢視

Both sides previous revision 前次修改
下次修改
前次修改
yubikey [2018/04/11 02:34]
jz
yubikey [2019/02/02 18:46] (目前版本)
jz
行 9: 行 9:
  
 <​code>​ <​code>​
 +# yubikey manager
 +pacman -S yubikey-manager
 +
 # smart card daemon # smart card daemon
 systemctl start pcscd.service systemctl start pcscd.service
行 14: 行 17:
  
 # enable U2F/​smartcard/​CCID feature # enable U2F/​smartcard/​CCID feature
-ykpersonalize -m86+ykpersonalize -m86 # yubikey 4 or below 
 +ykman config usb --enable-all # yubikey 5 or up
  
 # generate key # generate key
行 80: 行 84:
  
 # add a pure authentication key # add a pure authentication key
-add key+addkey 
 +8
 A A
 S S
 E E
 +Q
 4096 4096
 0 0
行 96: 行 102:
 gpg --armor --output pubkey.sec --export {KEYID} gpg --armor --output pubkey.sec --export {KEYID}
  
-# Import key+# Import key to card
 gpg --expert --edit-key {KEYID} gpg --expert --edit-key {KEYID}
 toggle toggle
行 111: 行 117:
 quit quit
 y y
 +
 +# Import key from card (Public key)
 +gpg --card-edit
 +fetch
 +quit
  
 # List keys # List keys
行 119: 行 130:
 </​code>​ </​code>​
  
 +===== Unblock GPG PIN =====
 +<​code>​
 +gpg --card-status
 +PIN retry counter : 0 0 3
 +
 +gpg --card-edit
 +gpg/​card>​ admin
 +Admin commands are allowed
 +
 +gpg/​card>​ passwd
 +gpg: OpenPGP card no. … detected
 +
 +1 - change PIN
 +2 - unblock PIN
 +3 - change Admin PIN
 +4 - set the Reset Code
 +Q - quit
 +
 +Your selection? 2
 +PIN unblocked and new PIN set.
 +
 +1 - change PIN
 +2 - unblock PIN
 +3 - change Admin PIN
 +4 - set the Reset Code
 +Q - quit
 +
 +Your selection? q
 +</​code>​
  
 ===== Reset Yubikey ===== ===== Reset Yubikey =====
行 160: 行 200:
   * https://​gist.github.com/​ageis/​5b095b50b9ae6b0aa9bf   * https://​gist.github.com/​ageis/​5b095b50b9ae6b0aa9bf
   * https://​gist.github.com/​ageis/​14adc308087859e199912b4c79c4aaa4   * https://​gist.github.com/​ageis/​14adc308087859e199912b4c79c4aaa4
 +  * https://​github.com/​ruimarinho/​yubikey-handbook/​blob/​master/​openpgp/​troubleshooting/​gpg-failed-to-sign-the-data.md
 +  * https://​www.mjollnir.cc/​archives/​216.html