yubikey: some clarification and sources for the PINs authored by anarcat's avatar anarcat
Done with @lelutin during his onboarding, tpo/tpa/team#41599
......@@ -422,7 +422,7 @@ That will show you the following prompt:
gpg/card>
There you need to type the `admin` and `passwd` commands to change the
first PIN:
first **normal PIN**:
gpg/card> admin
Admin commands are allowed
......@@ -438,10 +438,10 @@ first PIN:
Your selection? 1
This will prompt you for the current PIN. The factory default is
This will prompt you for the current PIN. The [factory default](https://support.yubico.com/hc/en-us/articles/4402836718866-Understanding-YubiKey-PINs) is
`123456` (yes, just like the combination on someone's luggage).
You will want to also set the Admin PIN, but the default is slightly different
You will want to also set the **Admin PIN**, but the default is slightly different
from the previous one, it is `12345678`:
gpg/card> passwd
......@@ -457,6 +457,13 @@ from the previous one, it is `12345678`:
[... pinentry prompt ...]
PIN changed.
Note that the pin needs to be at least 8 characters long, if you're
failing to set a PIN, that might be why!
If this doesn't work, or you messed up and forgot your PIN already,
you can try to [reset the OpenPGP application altogether](https://support.yubico.com/hc/en-us/articles/360013761339-Resetting-the-OpenPGP-Application-on-the-YubiKey) which
will *erase* the secret keys on the card, so be careful.
I typically set both to the same value since the basic PIN basically
allows any operation I'm worried about (short of changing the keys)
anyway. Furthermore, if they would be different, I would very likely
......
......