mirror/YubiKey-Guide
1
0
Fork 0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2026-07-17 06:25:14 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

tidy switch key script

Browse source
This commit is contained in:
drduh 2026-07-12 17:35:00 -07:00
parent 803e057461
commit 112b803b1d
1 changed files with 16 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

32
scripts/switch-to-backup-yubikey Normal file → Executable file
View file

@ -1,23 +1,21 @@
#!/bin/sh
#
# To make a duplicate Yubikey for GPG keys
# 1. Insert Yubikey1
# 2. Create keys/subkeys
# 3. Run keytocard to transfer keys to Yubikey1
# 4. QUIT WITHOUT SAVING!!!!!
# To duplicate YubiKey for GPG credentials:
# 1. Generate keys/subkeys
# 2. Insert first YubiKey
# 3. Run 'keytocard' to transfer keys to first YubiKey
# 4. Quit without saving!
#
# This will leave the keys on the Yubikey but NOT change the
# GPG keyring to point to the Yubikey1 with a stub
# This will leave the keys on the YubiKey but NOT change the
# GPG keyring to point to the first YubiKey with only a stub
#
# 5. Insert Yubikey2
# 6. Run keytocard to transfer keys to Yubikey2
# 7. QUIT and SAVE to make GPG point it's stubs to Yubikey2
# 5. Insert second YubiKey
# 6. Run 'keytocard' to transfer keys to second YubiKey
# 7. QUIT and SAVE to point GPG stubs to second YubiKey
#
# Running any decrypt, auth or sign will now ask you to insert Yubikey2
# To switch to Yubikey1 at any time run this script to force GPG
# to repoint the key stubs to the inserted Yubikey
read -p "Insert the Yubikey you want to use .... " ignore
echo "Switching GPG to backup Yubikey ..."
# Running any decrypt, auth or sign will now ask to insert second YubiKey
# To switch to the first YubiKey at any time run this script to force GPG
# to point key stubs to the currently inserted YubiKey
read -p "Insert YubiKey to use ... " ignore
echo "Switching GPG to backup YubiKey ..."
gpg-connect-agent "scd serialno" "learn --force" /bye