mirror of
https://github.com/drduh/YubiKey-Guide.git
synced 2024-06-02 08:20:50 +00:00
Added clearer recovery options
This commit is contained in:
parent
400fc5db16
commit
eb2faf0c7e
|
@ -2315,7 +2315,7 @@ Finally, install the [Mailvelope extension](https://chrome.google.com/webstore/d
|
|||
|
||||
If PIN attempts are exceeded, the card is locked and must be [reset](https://developers.yubico.com/ykneo-openpgp/ResetApplet.html) and set up again using the encrypted backup.
|
||||
|
||||
Copy the following script to a file and run `gpg-connect-agent -R $file` to lock and terminate the card. Then re-insert YubiKey to reset.
|
||||
Copy the following script to a file and run `gpg-connect-agent -r $file` to lock and terminate the card. Then re-insert YubiKey to reset.
|
||||
|
||||
```console
|
||||
/hex
|
||||
|
@ -2345,6 +2345,13 @@ Reset code: NOT SET
|
|||
Admin PIN: 12345678
|
||||
```
|
||||
|
||||
|
||||
# Recovery after reset
|
||||
|
||||
If for whatever reason you need to reinstate your YubiKey from your master key backup (such as the one stored on an encrypted USB described in [Backup keys](#backup-keys)), follow the following steps in [Rotating keys](#rotating-keys) to setup your environment, and then follow the steps of again [Configure Smartcard](#configure-smartcard).
|
||||
|
||||
Before you unmount your backup, ask yourself if you should make another one just in case.
|
||||
|
||||
# Notes
|
||||
|
||||
1. YubiKey has two configurations: one invoked with a short press, and the other with a long press. By default, the short-press mode is configured for HID OTP - a brief touch will emit an OTP string starting with `cccccccc`. If you rarely use the OTP mode, you can swap it to the second configuration via the YubiKey Personalization tool. If you *never* use OTP, you can disable it entirely using the [YubiKey Manager](https://developers.yubico.com/yubikey-manager) application (note, this not the similarly named older YubiKey NEO Manager).
|
||||
|
|
Loading…
Reference in New Issue
Block a user