Yubico Forum

https://www.gnupg.org/howtos/card-howto/en/ch03s02.html says:



Does this apply to yubikeys? I'm very new to the world of smart cards and gpg as well. Is this link relevant? https://developers.yubico.com/ykneo-openpgp/ResetApplet.html.

No, but it does mean you would need to reset and any keys on the applet would be lost as a result. This is true for both OpenPGP and PIV, although locking one out doesn't affect the other.

I never heard anything about entering the MGM too often makes the key unusable, I only thought that was for PIN/PUK.

He's asking about the OpenPGP applet, NOT the PIV applet

OpenPGP:
PIN
Resetting Code
Admin PIN

PIV:
PIN
PUK
Management Key

But you said that this is true for both pgp and piv.

OpenPGP:
Lock the PIN + Admin PIN = requires reset, lose all data

PIV:
Lock the PIN + PUK = requires a reset, lose all data

Okay i thought that the mgm could lock up because the best equivalent of the admin pin would be the mgm, and locking up the admin pin is possible for both but when it's just pin and puk its okay (also nice that if you screwed up the puk you can go reset the retry counters.)