I've recently purchased a Yubikey 4 from a third-part retailer (Dustin AB), and almost everything has been working flawlessly.
However, I've been having problems on setting up the OpenPGP smartcard support with GnuPG on my GNU/Linux system.
Basically, I've followed this guide (I've also tried the official guide): https://malcolmsparks.com/posts/yubikey-gpg.html
- 1) Fetched gnupg, pcsclite, pcsc-tools and ccid from the official Arch Linux repositories.
2) Asserted that my Yubikey 4 could be found with pcsc_scan -n, lsusb and ykinfo -a.
3) Finally, typed gpg2 --card-status (while the Yubikey 4 was connected).
4) The following error is reported: gpg: OpenPGP card not available: Not supported
5) No additional output. gpg-agent seems to be active with a few scdaemon instances.
Honestly, I have no idea what the problem is. The same is happening with my friend's YubiKey 4 while also running Linux.
I've attempted this on my other friend's Windows 10 partition, and I have the exact same problems as seen above.
Anyway, to better help in diagnosis, I've attached some settings and some output (redacted some information).
(Slot 1 hasn't been touched, Slot 2 is OATH-HOTP).
Code:
# gpg.conf
use-agent
use-agent
Code:
# gpg-agent.conf
enable-ssh-support
default-cache-ttl 7200
log-file ${HOME}/.gnupg/gpg-agent.log
enable-ssh-support
default-cache-ttl 7200
log-file ${HOME}/.gnupg/gpg-agent.log
Code:
# scdaemon.conf
reader-port "Yubico Yubikey 4 OTP+U2F+CCID 00 00"
log-file ${HOME}/.gnupg/scdaemon.log
debug-level advanced
card-timeout 2
verbose
reader-port "Yubico Yubikey 4 OTP+U2F+CCID 00 00"
log-file ${HOME}/.gnupg/scdaemon.log
debug-level advanced
card-timeout 2
verbose
Quote:
gpg --version
gpg (GnuPG) 2.1.15
libgcrypt 1.7.3
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Home: /home/xxxxxxxxxxxx/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2
Quote:
gpg2 --card-status
gpg: OpenPGP card not available: Not supported
Quote:
lsusb
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Bus 001 Device 009: ID 1050:0407 Yubico.com Yubikey 4 OTP+U2F+CCID
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Quote:
serial: xxxxxxx
serial_hex: xxxxxx
serial_modhex: xxxxxx
version: 4.3.1
touch_level: 527
programming_sequence: 3
slot1_status: 1
slot2_status: 1
vendor_id: 1050
product_id: 407
Quote:
pcsc_scan -n
Scanning present readers...
0: Yubico Yubikey 4 OTP+U2F+CCID 00 00
Sat Oct 15 21:39:39 2016
Reader 0: Yubico Yubikey 4 OTP+U2F+CCID 00 00
Card state: Card inserted,
ATR: XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX
Any suggestions are greatly appreciated!
Thanks for your help and time!
Best regards, JapanskCykel
Statistics: Posted by japanskcykel — Sat Oct 15, 2016 7:26 pm
]]>