bydesignla.blogg.se

We’ll choose not to make an off-card backup of the key, and to have the key ex­pire af­ter 1 year: $ gpg -card-edit Next, set your user PIN (factory de­fault is 123456). It seems that it may be pos­si­ble to re­set this, but I have not tested this.įirst, set an ad­min PIN (factory de­fault is 12345678). Note: if you en­ter the fac­tory de­fault PIN in­cor­rectly too many times the Yubikey will be­come blocked. If at this stage you re­ceive a ‘card er­ror’, try re­mov­ing and rein­sert­ing the Yubikey. Install GPG Tools for Mac: $ brew cask install gpgtools Set the Yubikey’s mode to al­low con­cur­rent OpenPGP SmartCard and OTP us­age: $ ykpersonalize -m82 $ brew cask install yubikey-neo-manager yubikey-personalization-gui

Install Yubikey man­age­ment tools: $ brew update This was com­piled a lit­tle af­ter I ac­tu­ally per­formed the process, so if there are any er­rors/​omis­sions please let me know. This post is a com­bi­na­tion/​dis­til­la­tion of a hand­ful of HOWTO guides I found use­ful for get­ting this set up. It is as­sumed that Homebrew and brew cask are in­stalled. This post is writ­ten to help set this up for Macs run­ning Yosemite or El Capitan, us­ing Fish shell. With the pri­vate key for GPG and SSH held on the Yubikey, it is much more se­cure than if it were held on the lo­cal hard disk. The lat­ter es­tab­lishes a sec­ond fac­tor for con­trol­ling ac­cess that can­not be com­pro­mised sim­ply by theft of an SSH pri­vate key and/​or use of a key­log­ger.

for con­nect­ing to servers, Git source con­trol, and Heroku. SSH pub­lic-key au­then­ti­ca­tion, e.g.The goal of this post is to de­scribe the setup steps for: