Comments (4)
@drduh while it's good that you now point out that adduid should be run while the secret keys are available, perhaps it is also worth pointing out what steps need to be taken if someone wants to run adduid at a later point in time as per @Astorsoft comment.
from yubikey-guide.
It could also be interesting to add information about the impact of adding identities after the fact. As it was not part of the tutorial I forgot to do it in the first place, then realised I forgot to add my other emails once everything was done. I restored my master key, edited it, added the emails, saved, then sent the public key again to key servers. I just hope this is enough and I don't have to re-create subkeys and/or re-import them into the yubikey. I could not find any clear information on the latter.
from yubikey-guide.
I'm not GPG expert but I don't think you need to update the keys on the yubikey. You are absolutely right in that you have to bring out your secret keys again to perform the adduid but from there all I think you need to do is export a new public key that contains the new uid, then move that to wherever you want and import it. At least that's what I just tested and it seems to work. I did NOT perform a new keytocard, yet my yubikey is able to decrypt the content. There's only one decrypt / encrypt subkey after all and it doesn't change, only the association between that key and UIDs change. Since that association lies with GPG on the computer and not on the yubikey (AFAIK) then we shouldn't need to update the yubikey.
Would be great if someone else could verify the theory behind this or if by not updating the yubikey we are missing out on something and also good if someone can just practically verify this by repeating.
from yubikey-guide.
@drduh while it's good that you now point out that adduid should be run while the secret keys are available, perhaps it is also worth pointing out what steps need to be taken if someone wants to run adduid at a later point in time as per @Astorsoft comment.
Is there any info on how to add them later on? I am stuck at that as I now have another email to add but gpg for the above reasons doesnt let me. And I dont want to break the existing key by trying something wrong :)
from yubikey-guide.
Related Issues (20)
- URL of public key
- Complement guide for how to use yubikey on two computers HOT 9
- yubikey don't ask for press the button HOT 2
- Private key backup when renewing sub-keys HOT 2
- hopenpgp-tools not available on Debian Bookworm HOT 2
- Other subkey generation method HOT 1
- can one use openssl to decrypt files HOT 2
- llhenht
- https://github.com/drduh/YubiKey-Guide#yubikey has predictable components HOT 3
- H
- Authentication SubKey shows AR HOT 1
- Unable to get keytocard subcerts to yubikey 5 NFC (piv) :-/ HOT 2
- YubiKey (GPG and ssh keys) HOT 1
- GPG acts like my YubiKey isn't plugged in HOT 8
- A project that encapsulates pagent's shared memory interface into a named pipe to replace SSH_AUTH_SOCK HOT 1
- NixOS image as a flake HOT 14
- Timeout does not work in pam_u2f.so module HOT 1
- is the "Using Multiple Keys" section still accurate? HOT 1
- Private keys exportable HOT 3
- Little Snitch & Steven Black host
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from yubikey-guide.