Re: Use same Yubikey with gnupg 2.0 on multiple computers, L

2016-05-16T16:27:20+01:00

I just solved it.
Found this information here http://www.narf.ssji.net/~shtrom/wiki/t ... psmartcard
in the paragraph "Using the Card on Multiple Computers"
it suggestes:

Code:

$ gpg2 --card-edit
> fetch
> quit
$ gpg2 --card-status

and that worked fine for me.

In fact, the first part can be omitted, if you have the matching pubkey on your keyring. In that case a

Code:

gpg2 --card-status

is sufficient.
The essential thing is, you have to delete the whole secret key before, only then the stubs get rebuilt:

Code:

gpg2 --delete-secret-key

Regards,
x11

Statistics: Posted by x11 — Mon May 16, 2016 4:27 pm

[solved] Use same Yubikey with gnupg 2.0 on multiple PC's.

2016-05-16T17:26:38+01:00

I created a 4096-bit gpg-key consisting of:
the master-key and 3 sub-keys for signing, decrypting, authenticating on a secure offline-PC.
From that key I exported just the 3 subkeys by:

Code:

gpg --export-secret-subkeys [key-ID] > subkeys

copied subkeys to one of my laptops, imported them into my keyring and on that laptop transferred the subkeys to my Yubikey4.
All works fine and I just have to plug in the Yubikey and enter the Yubikey-password to use my keys for decryptpting, signing and ssh-authentication - GREAT!

Now I want to use the same Yubikey with the same same gpg-keys on a second laptop.
I tried to just copy over the whole ~/.gnupg directory from laptop #1 to laptop #2, but gpg-agent reports "secret key not available". The Yubikey is recognised as I can check with

Code:

gpg2 --card-status

Seems there is some additional information missing - please help.

Kind regards,
x11

Statistics: Posted by x11 — Sun May 15, 2016 12:03 pm

Yubico Forum

Re: Use same Yubikey with gnupg 2.0 on multiple computers, L

[solved] Use same Yubikey with gnupg 2.0 on multiple PC's.