差異處
這裏顯示兩個版本的差異處。
Both sides previous revision 前次修改 下次修改 | 前次修改 | ||
yubikey [2018/04/11 02:34] jz |
yubikey [2019/02/02 18:46] (目前版本) jz |
||
---|---|---|---|
行 9: | 行 9: | ||
<code> | <code> | ||
+ | # yubikey manager | ||
+ | pacman -S yubikey-manager | ||
+ | |||
# smart card daemon | # smart card daemon | ||
systemctl start pcscd.service | systemctl start pcscd.service | ||
行 14: | 行 17: | ||
# enable U2F/smartcard/CCID feature | # enable U2F/smartcard/CCID feature | ||
- | ykpersonalize -m86 | + | ykpersonalize -m86 # yubikey 4 or below |
+ | ykman config usb --enable-all # yubikey 5 or up | ||
# generate key | # generate key | ||
行 80: | 行 84: | ||
# add a pure authentication key | # add a pure authentication key | ||
- | add key | + | addkey |
+ | 8 | ||
A | A | ||
S | S | ||
E | E | ||
+ | Q | ||
4096 | 4096 | ||
0 | 0 | ||
行 96: | 行 102: | ||
gpg --armor --output pubkey.sec --export {KEYID} | gpg --armor --output pubkey.sec --export {KEYID} | ||
- | # Import key | + | # Import key to card |
gpg --expert --edit-key {KEYID} | gpg --expert --edit-key {KEYID} | ||
toggle | toggle | ||
行 111: | 行 117: | ||
quit | quit | ||
y | y | ||
+ | |||
+ | # Import key from card (Public key) | ||
+ | gpg --card-edit | ||
+ | fetch | ||
+ | quit | ||
# List keys | # List keys | ||
行 119: | 行 130: | ||
</code> | </code> | ||
+ | ===== Unblock GPG PIN ===== | ||
+ | <code> | ||
+ | gpg --card-status | ||
+ | PIN retry counter : 0 0 3 | ||
+ | |||
+ | gpg --card-edit | ||
+ | gpg/card> admin | ||
+ | Admin commands are allowed | ||
+ | |||
+ | gpg/card> passwd | ||
+ | gpg: OpenPGP card no. … detected | ||
+ | |||
+ | 1 - change PIN | ||
+ | 2 - unblock PIN | ||
+ | 3 - change Admin PIN | ||
+ | 4 - set the Reset Code | ||
+ | Q - quit | ||
+ | |||
+ | Your selection? 2 | ||
+ | PIN unblocked and new PIN set. | ||
+ | |||
+ | 1 - change PIN | ||
+ | 2 - unblock PIN | ||
+ | 3 - change Admin PIN | ||
+ | 4 - set the Reset Code | ||
+ | Q - quit | ||
+ | |||
+ | Your selection? q | ||
+ | </code> | ||
===== Reset Yubikey ===== | ===== Reset Yubikey ===== | ||
行 160: | 行 200: | ||
* https://gist.github.com/ageis/5b095b50b9ae6b0aa9bf | * https://gist.github.com/ageis/5b095b50b9ae6b0aa9bf | ||
* https://gist.github.com/ageis/14adc308087859e199912b4c79c4aaa4 | * https://gist.github.com/ageis/14adc308087859e199912b4c79c4aaa4 | ||
+ | * https://github.com/ruimarinho/yubikey-handbook/blob/master/openpgp/troubleshooting/gpg-failed-to-sign-the-data.md | ||
+ | * https://www.mjollnir.cc/archives/216.html |