System Administration

Setting up the YubiKey

Lutz Behnke
This is my adpation of Here I skip the machine setup covery by Dr. Duh. The short of it is: you need a machine with a current kernal that is disconnecte from the network. Below are my choices and changes. This is even more opinionated than his document. Creating Keys Setup the environment: $ export GNUPGHOME=$(mktemp -d) $ wget -O $GNUPGHOME/gpg.conf Generate a Pin $ tr -dc '[:upper:]' < /dev/urandom | fold -w 20 | head -n1 Write down the pin and keep in safe place.