Make a note of the key ID, that is displayed in the message such as "gpg: key 1234ABC marked as ultimately trusted". When the key has been generated, you will see several messages displayed. While the key is being generated, move your mouse around or type on the keyboard to gain enough entrophy.
A dialog box is displayed so you can enter the passphrase for your key. If all information is correct, enter O (for Okay) and press Enter. Review the information you entered, make any changes if necessary. (To leave the comment blank, just press Enter.) If desired, enter a Comment about this key, and press Enter. Enter your Email Address and press Enter. Be sure to enter both your first and last name. Now you will enter your user information. Verify the expiration date when prompted. Specify the expiration date of the key, and press Enter. For a YubiKey 4 or 5, enter 4096 and press Enter. For a YubiKey NEO, enter 2048 and press Enter. Specify the size of key you want to generate. 
When prompted to specify the key type, enter 1 (for "RSA and RSA (Default)") and press Enter. Enter the GPG command: gpg -expert -full-gen-key. Insert the YubiKey into the USB port if it is not already plugged in. Note that with live Linux, certain packages (like scdaemon) may need to be installed manually. Note: It is strongly recommended that you to generate keys on an offline system, such as a live Linux distribution like Ubuntu. Generating Keys externally from the YubiKey (Recommended) Linux: Pre-installed on all common distributions. A current version of the GnuPG software installed. Changing the PINs can be done by running the command gpg -change-pin. 
Once keys have been moved to/generated on the device, we also recommend that you personalize the YubiKey by changing the PIN, setting the admin PIN, and so on.
To allow for your PGP keys to be backed up, we recommend you generate them externally, not directly on the YubiKey. Before you begin, decide if you want to generate the private key on the YubiKey device, or if you want to generate the private key off of the YubiKey and then move the subkeys to the YubiKey. These instructions will show you how to set up your YubiKey with OpenPGP. If the User PIN and/or Admin PIN have been changed and are not known, the OpenPGP Applet can be reset by following this article. Note: If you haven't set a User PIN or an Admin PIN for OpenPGP, the default values are 12345678, respectively.
0 kommentar(er)
