Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 2:17 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Wed Mar 22, 2017 3:37 pm 
Offline

Joined: Wed Mar 22, 2017 3:25 pm
Posts: 1
I received a brand-new Yubikey 4 and wanted to copy an existing OpenPGP key onto it for testing purposes. During the process, I had several issues with russing gpg-agent and such, so I was unsure which password to enter at which time. I worked according to this How To.

However, I ended up with gpg: card is permanently locked! as in:
Code:
me@desktop ~ $ gpg --card-edit

can't connect to `/home/me/.gnupg/S.gpg-agent': No such file or directory
Application ID ...: D276xxx
Version ..........: 2.1
Manufacturer .....: unknown
Serial number ....: 0xxxx
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
Login data .......: [not set]
Private DO 1 .....: [not set]
Private DO 2 .....: [not set]
Signature PIN ....: not forced
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 0 0
Signature counter : 0
Signature key ....: [none]
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

gpg/card> admin
Admin commands are allowed

gpg/card> url
URL to retrieve public key: http://www....
gpg: card is permanently locked!
gpg: error setting URL: bad passphrase


I get a similar error message when trying to move a private key onto the Yubikey 4:
Code:
gpg> keytocard
Please select where to store the key:
   (2) Encryption key
Your selection? 2
gpg: KEYTOCARD failed: Bad secret key


I found some explanations on how to reset the NEO, but I don't think that the mentioned reset mechanisms work with the Yubikey 4 as well.

How can I resolve this issue?


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Mar 22, 2017 6:01 pm 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
Covered on our website:

http://www.homedepot.com/p/Suncast-Trem ... /204725195

Our developers website:

https://developers.yubico.com/ykneo-ope ... pplet.html

On the forum:

viewtopic.php?f=26&t=2182
viewtopic.php?f=35&t=2193

Only difference in OpenPGP reset between YubiKey NEO and YubiKey 4 is the replies you get from PGP connect agent which confirm each PIN has been locked out successfully and the card has been terminated.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group