Yubico Forum

Re: Changing OpenPGP PINs afterwards

2015-06-22T13:28:50+01:00

http://g10code.com/docs/openpgp-card-2.0.pdf

chapter 4.2

Statistics: Posted by Tom2 — Mon Jun 22, 2015 1:28 pm

Re: Changing OpenPGP PINs afterwards

2015-06-22T13:22:28+01:00

I tried an 8 digit PIN - it worked - also a 6 digit PIN for the standard PIN - thanks for the clarification - as the gpg error messages don't clearly say that there's a minimum PIN length...

Just something to add: I still can't set the reset code - using the new admin PIN I configured... - Is there also a 6-digit-limitation? Because GPG says that there's a wrong PIN even if I double checked the PIN

Statistics: Posted by paradonym — Mon Jun 22, 2015 1:22 pm

Re: Changing OpenPGP PINs afterwards

2015-06-22T13:20:43+01:00

No minimum 8, please try 12345678

Statistics: Posted by Tom2 — Mon Jun 22, 2015 1:20 pm

Re: Changing OpenPGP PINs afterwards

2015-06-22T13:11:18+01:00

No, are user and admin PIN fixed digit?

Statistics: Posted by paradonym — Mon Jun 22, 2015 1:11 pm

Re: Changing OpenPGP PINs afterwards

2015-06-22T13:08:54+01:00

Are you using 8 digits for the admin pin ?

Statistics: Posted by Tom2 — Mon Jun 22, 2015 1:08 pm

Re: Changing OpenPGP PINs afterwards

2015-06-22T07:19:22+01:00

Can't I change the PIN after a key is written to the card? So do I have to change the PIN before generating a key and writing it to the card?

Statistics: Posted by paradonym — Mon Jun 22, 2015 7:19 am

Changing OpenPGP PINs afterwards

2015-06-19T20:33:03+01:00

I try to change the OpenPGP smartcard PINs after creation of the keypairs

Code:

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>gpg --card-edit


PIN retry counter : 3 3 3
Signature counter : 5


gpg/card> admin
Admin-Befehle sind erlaubt

gpg/card> passwd
gpg: OpenPGP Karte Nr.  erkannt

1 - change PIN
2 - unblock PIN
3 - change Admin PIN
4 - set the Reset Code
Q - quit

Ihre Auswahl? 1
Error changing the PIN: Nutzungsvorraussetzungen nicht erf³llt

1 - change PIN
2 - unblock PIN
3 - change Admin PIN
4 - set the Reset Code
Q - quit

Ihre Auswahl? 3
Error changing the PIN: Nutzungsvorraussetzungen nicht erf³llt

1 - change PIN
2 - unblock PIN
3 - change Admin PIN
4 - set the Reset Code
Q - quit

Ihre Auswahl? 2
Error unblocking the PIN: Ung³ltiger Wert

1 - change PIN
2 - unblock PIN
3 - change Admin PIN
4 - set the Reset Code
Q - quit

Ihre Auswahl?

key info is correct, fingerprints are shown right...

Trying to change the PIN and the admin PIN from default the gpg program says something like "usage prerequirities not present" trying to unblock the PIN it says "invalid value"...

so how do I change the PINs after initial creation of the keypair to not use the default PINs? What do I do wrong in the commands pasted here?

the HowTo https://www.yubico.com/2012/12/yubikey-neo-openpgp/ says --change-pin - so should I use "gpg --card-edit --change-pin" ?,
the card-edit dev document examples https://developers.yubico.com/PGP/Card_edit.html should show me the right way to do it - that's the way I tried above...

Statistics: Posted by paradonym — Fri Jun 19, 2015 8:33 pm