Changes

Page history
yubikey: some clarification and sources for the PINs authored by anarcat's avatar anarcat 
Done with @lelutin during his onboarding, tpo/tpa/team#41599
Show whitespace changes
Inline Side-by-side
howto/yubikey.md
View page @ afa833c8
...@@ -422,7 +422,7 @@ That will show you the following prompt: ...@@ -422,7 +422,7 @@ That will show you the following prompt:
gpg/card> gpg/card>
There you need to type the `admin` and `passwd` commands to change the There you need to type the `admin` and `passwd` commands to change the
first PIN: first **normal PIN**:
gpg/card> admin gpg/card> admin
Admin commands are allowed Admin commands are allowed
...@@ -438,10 +438,10 @@ first PIN: ...@@ -438,10 +438,10 @@ first PIN:
Your selection? 1 Your selection? 1
This will prompt you for the current PIN. The factory default is This will prompt you for the current PIN. The [factory default](https://support.yubico.com/hc/en-us/articles/4402836718866-Understanding-YubiKey-PINs) is
`123456` (yes, just like the combination on someone's luggage). `123456` (yes, just like the combination on someone's luggage).
You will want to also set the Admin PIN, but the default is slightly different You will want to also set the **Admin PIN**, but the default is slightly different
from the previous one, it is `12345678`: from the previous one, it is `12345678`:
gpg/card> passwd gpg/card> passwd
...@@ -457,6 +457,13 @@ from the previous one, it is `12345678`: ...@@ -457,6 +457,13 @@ from the previous one, it is `12345678`:
[... pinentry prompt ...] [... pinentry prompt ...]
PIN changed. PIN changed.
Note that the pin needs to be at least 8 characters long, if you're
failing to set a PIN, that might be why!
If this doesn't work, or you messed up and forgot your PIN already,
you can try to [reset the OpenPGP application altogether](https://support.yubico.com/hc/en-us/articles/360013761339-Resetting-the-OpenPGP-Application-on-the-YubiKey) which
will *erase* the secret keys on the card, so be careful.
I typically set both to the same value since the basic PIN basically I typically set both to the same value since the basic PIN basically
allows any operation I'm worried about (short of changing the keys) allows any operation I'm worried about (short of changing the keys)
anyway. Furthermore, if they would be different, I would very likely anyway. Furthermore, if they would be different, I would very likely
... ...
......