s83/privacy-guides
1
0
Fork 0
mirror of https://github.com/sunknudsen/privacy-guides.git synced 2025-02-23 01:03:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Improved ykman steps

Browse Source
This commit is contained in:
Sun Knudsen 2021-09-01 10:55:22 -04:00
parent e82e217f3a
commit ce292b299a
No known key found for this signature in database
GPG Key ID: 1FA767862BBD1305
1 changed files with 22 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
how-to-generate-and-air-gap-pgp-private-keys-using-gnupg-tails-and-yubikey/README.md
View File

@ -834,16 +834,35 @@ Enter Admin PIN:
$ ykman openpgp keys set-touch aut on --force $ ykman openpgp keys set-touch aut on --force
Enter Admin PIN: Enter Admin PIN:
$ ykman openpgp keys set-touch att on --force
Enter Admin PIN:
$ ykman openpgp info
OpenPGP version: 3.4
Application version: 5.4.3
PIN tries remaining: 3
Reset code tries remaining: 0
Admin PIN tries remaining: 3
Touch policies
Signature key On
Encryption key On
Authentication key On
Attestation key On
``` ```
On
👍
### Step 25 (optional): disable all YubiKey interfaces except for OpenPGP over USB ### Step 25 (optional): disable all YubiKey interfaces except for OpenPGP over USB
> Heads-up: increase `sleep` delay if “Error: No YubiKey detected!” error is thrown. > Heads-up: increase `sleep` delay if “Error: No YubiKey detected!” error is thrown.
```console ```console
$ ykman config usb --enable OPENPGP --force $ ykman config usb --disable FIDO2 --disable HSMAUTH --disable OATH --disable OTP --disable PIV --disable U2F --enable OPENPGP --force
$ for interface in FIDO2 HSMAUTH OATH OTP PIV U2F; do ykman config usb --disable $interface --force; sleep 3; done
$ ykman config nfc --disable-all --force $ ykman config nfc --disable-all --force
``` ```