1
0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2024-12-23 00:48:57 +00:00

Set touch policy to fixed.

Setting the touch policy to `on` does not prevent the policy from
later being turned off again. Setting it to `fixed` is more secure
because it can not be turned off.

If someone wants to disable the touch policy they can always restore
the keys from the backups created in the guide.
This commit is contained in:
Kenny MacDermid 2020-05-27 16:39:29 -03:00
parent a7ef91d4d8
commit 78164e8bfd
No known key found for this signature in database
GPG Key ID: 88B5D54B9ACB2F23

View File

@ -2256,19 +2256,19 @@ To require a touch for each key operation, install [YubiKey Manager](https://dev
Authentication:
```console
$ ykman openpgp set-touch aut on
$ ykman openpgp set-touch aut fixed
```
Signing:
```console
$ ykman openpgp set-touch sig on
$ ykman openpgp set-touch sig fixed
```
Encryption:
```console
$ ykman openpgp set-touch enc on
$ ykman openpgp set-touch enc fixed
```
YubiKey will blink when it is waiting for a touch. On Linux you can also use [yubikey-touch-detector](https://github.com/maximbaz/yubikey-touch-detector) to have an indicator or notification that YubiKey is waiting for a touch.