137 lines
3.1 KiB
Markdown
137 lines
3.1 KiB
Markdown
|
---
|
|||
|
|
aliases:
|
|||
|
|
- юбикей
|
|||
|
|
tags:
|
|||
|
|
- зрелость/🌱
|
|||
|
|
date:
|
|||
|
|
- - 2024-01-09
|
|||
|
|
zero-link:
|
|||
|
|
- "[[00 DevOps]]"
|
|||
|
|
linked:
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## Заметки
|
|||
|
|
-
|
|||
|
|
## Первичная настройка
|
|||
|
|
Вставляем юбикей и вводим команду
|
|||
|
|
```
|
|||
|
|
gpg --card-status
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
В новом юбикей вывод будет примерно такой
|
|||
|
|
```
|
|||
|
|
Reader ...........: Yubico YubiKey OTP FIDO CCID
|
|||
|
|
Application ID ...: D2760001240100000006223209330000
|
|||
|
|
Application type .: OpenPGP
|
|||
|
|
Version ..........: 3.4
|
|||
|
|
Manufacturer .....: Yubico
|
|||
|
|
Serial number ....: 22320933
|
|||
|
|
Name of cardholder: [не установлено]
|
|||
|
|
Language prefs ...: [не установлено]
|
|||
|
|
Salutation .......:
|
|||
|
|
URL of public key : [не установлено]
|
|||
|
|
Login data .......: [не установлено]
|
|||
|
|
Signature PIN ....: не требуется
|
|||
|
|
Key attributes ...: rsa2048 rsa2048 rsa2048
|
|||
|
|
Max. PIN lengths .: 127 127 127
|
|||
|
|
PIN retry counter : 3 0 3
|
|||
|
|
Signature counter : 0
|
|||
|
|
KDF setting ......: off
|
|||
|
|
UIF setting ......: Sign=off Decrypt=off Auth=off
|
|||
|
|
Signature key ....: [none]
|
|||
|
|
Encryption key....: [none]
|
|||
|
|
Authentication key: [none]
|
|||
|
|
```
|
|||
|
|
### Смена пинкодов
|
|||
|
|
- Сменить pin.
|
|||
|
|
- По умолчанию pin: 123456
|
|||
|
|
- Сменить puk.
|
|||
|
|
- По умолчанию puk: 12345678
|
|||
|
|
- Сменить managment key
|
|||
|
|
|
|||
|
|
Сменить pin для gpg
|
|||
|
|
```
|
|||
|
|
ubuntu@ubuntu:~/Desktop$ gpg --edit-card
|
|||
|
|
|
|||
|
|
Reader ...........: 1050:04cccccccccccdf:0
|
|||
|
|
Application ID ...: D2ccccccccc00
|
|||
|
|
Application type .: OpenPGP
|
|||
|
|
Version ..........: 3.4
|
|||
|
|
Manufacturer .....: Yubico
|
|||
|
|
Serial number ....: 2057xxxxx
|
|||
|
|
Name of cardholder: [not set]
|
|||
|
|
Language prefs ...: [not set]
|
|||
|
|
Salutation .......:
|
|||
|
|
URL of public key : [not set]
|
|||
|
|
Login data .......: [not set]
|
|||
|
|
Signature PIN ....: not forced
|
|||
|
|
Key attributes ...: rsa2048 rsa2048 rsa2048
|
|||
|
|
Max. PIN lengths .: 127 127 127
|
|||
|
|
PIN retry counter : 3 0 3
|
|||
|
|
Signature counter : 0
|
|||
|
|
KDF setting ......: off
|
|||
|
|
Signature key ....: [none]
|
|||
|
|
Encryption key....: [none]
|
|||
|
|
Authentication key: [none]
|
|||
|
|
General key info..: [none]
|
|||
|
|
|
|||
|
|
gpg/card> admin (go to admin mode)
|
|||
|
|
Admin commands are allowed
|
|||
|
|
|
|||
|
|
gpg/card> passwd
|
|||
|
|
gpg: OpenPGP card no. D2xxxxxxxxxxxxxxxxxxxxxxxx000 detected
|
|||
|
|
|
|||
|
|
1 - change PIN
|
|||
|
|
2 - unblock PIN
|
|||
|
|
3 - change Admin PIN
|
|||
|
|
4 - set the Reset Code
|
|||
|
|
Q - quit
|
|||
|
|
|
|||
|
|
Your selection? 1
|
|||
|
|
Error changing the PIN: Bad PIN
|
|||
|
|
|
|||
|
|
1 - change PIN
|
|||
|
|
2 - unblock PIN
|
|||
|
|
3 - change Admin PIN
|
|||
|
|
4 - set the Reset Code
|
|||
|
|
Q - quit
|
|||
|
|
|
|||
|
|
Your selection? 1 (the default PIN is 123456)
|
|||
|
|
PIN changed.
|
|||
|
|
|
|||
|
|
1 - change PIN
|
|||
|
|
2 - unblock PIN
|
|||
|
|
3 - change Admin PIN
|
|||
|
|
4 - set the Reset Code
|
|||
|
|
Q - quit
|
|||
|
|
|
|||
|
|
Your selection? 3 (the default admin PIN is 12345678)
|
|||
|
|
PIN changed.
|
|||
|
|
|
|||
|
|
1 - change PIN
|
|||
|
|
2 - unblock PIN
|
|||
|
|
3 - change Admin PIN
|
|||
|
|
4 - set the Reset Code
|
|||
|
|
Q - quit
|
|||
|
|
|
|||
|
|
Your selection? q
|
|||
|
|
|
|||
|
|
gpg/card> quit
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Перенос gpg ключа
|
|||
|
|
Сначала генерируем gpg ключ
|
|||
|
|
|
|||
|
|
Для переноса существующего ключа используем команду
|
|||
|
|
```shell
|
|||
|
|
gpg --edit-key <KEY_ID>
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
После входа в режим редактирования можно использовать команду
|
|||
|
|
```shell
|
|||
|
|
keytocard
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## Полезные материалы
|
|||
|
|
- [Полный обзор Yubikey - YouTube](https://www.youtube.com/watch?v=fv2ZY7aXWv0)
|