Posts

Showing posts with the label Yubikey

Create Backup Yubikey With Identical PGP Keys

Answer : found this blurb which says that theres a command you can run which will essentially tell your local gpg app to scan the new card and use that instead if things gel. so in the case of using a backup card, not the worst case to run an "init" to make it work. https://forum.yubico.com/viewtopic38a1.html?f=35&t=2400 Running gpg-connect-agent "scd serialno" "learn --force" /bye will update the secret key stubs for the PGP keys on the currently inserted key. So running that after key insertion will cause gpg to use the currently inserted key. After a lot trial and error, I finally found a way to achieve this. Here is an answer to my own question in case it helps someone : The trick was to not try to export the same subkeys to the two Yubikeys (gpg doesn't like that) but to generate different subkeys. In my keyring I have 6 subkeys : 3 for the main Yubikey (Sign, Encrypt, Auth) and 3 for the backup Yubikey. I exported the corresp...