Yubico Forum ...visit our web-store at 2017-02-08T15:55:24+01:00 https://forum.yubico.com/feed.php?f=35&t=2550 2017-02-08T15:55:24+01:00 2017-02-08T15:55:24+01:00 https://forum.yubico.com/viewtopic.php?t=2550&p=9365#p9365 <![CDATA[Re: How to backup a YubiKey when all keys are moved to it?]]> TheStigh wrote:

Hi,

After moving all keys from the local certificate to the YubiKey 4 (according to https://github.com/drduh/YubiKey-Guide/ ... public-key) I would like to have a backup YubiKey stored on a safe location.

Is it possible to do this by any commands or routine?

The only way I see it at the moment is to:
- Delete all existing local keyrings/trust.db
- Import the backed up certificate
- Re-do the procedure (https://github.com/drduh/YubiKey-Guide/ ... public-key) to the new YubiKey

Hopefully there is an easier way...



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


It's actually the only way, you need to use the gpg --delete-secret-keys command and to import your subkeys again to your new yubikey (after using the gpg --card-status command) (you need to have exported these BEFORE using the keytocard command, otherwise they are lost and you need to revoke those subkeys and generate (and export) new ones, assuming you still have access to your master key.)
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJYmzF6AAoJEKa4nBz3AlIIrzAH/RMuvtMXfwCNlnBJUQ3Ly/ED
Fy+nBJFtNdPQe9/8ndgbRbghtjKDTRr5u9Nzw3H0VAKFxhi5b22VNZ0Xbt8199/Q
O4MjDSUD+lKkmvHtsJdC/xsXk7pkJeQP4h2DzjimZjgWgK5lRlQqXtqW57+CrrSR
ldZ5hIOw8M9W8q3tuEdibD99P5ASw7S08XSum3wxyPx7Yje4KN1xvx+SVAFutYLJ
TtGAx3yv+1Up9AnANhTEgGXqAS0JrxTgCkA/o87vnMplzThD2IspgUzyze7PoIlG
8/3awVMIIpuHYdyb/EfsXui8Ey8y3ZvrDikT4y+Fnk7TthkNXnzsQCvRsLcakQM=
=gnbK
-----END PGP SIGNATURE-----

Statistics: Posted by Mathieulh — Wed Feb 08, 2017 3:55 pm

]]> 2017-02-01T17:29:23+01:00 2017-02-01T17:29:23+01:00 https://forum.yubico.com/viewtopic.php?t=2550&p=9346#p9346 <![CDATA[How to backup a YubiKey when all keys are moved to it?]]>
After moving all keys from the local certificate to the YubiKey 4 (according to https://github.com/drduh/YubiKey-Guide/ ... public-key) I would like to have a backup YubiKey stored on a safe location.

Is it possible to do this by any commands or routine?

The only way I see it at the moment is to:
- Delete all existing local keyrings/trust.db
- Import the backed up certificate
- Re-do the procedure (https://github.com/drduh/YubiKey-Guide/ ... public-key) to the new YubiKey

Hopefully there is an easier way...

Statistics: Posted by TheStigh — Wed Feb 01, 2017 5:29 pm

]]>