sudo pacman -S gnupg pcsc-tools Plug in your dongle and check if the system sees it:
gpg --card-status Expected output shows: gpg dongle setup
enable-ssh-support Restart and add to shell profile ( ~/.bashrc or ~/.zshrc ): sudo pacman -S gnupg pcsc-tools Plug in your
# PC/SC driver pcsc-driver /usr/lib/libpcsclite.so # Disable CCID (for YubiKey) disable-ccid # Enable card removal notification card-timeout 5 Edit ~/.gnupg/gpg-agent.conf : gpg dongle setup
gpgconf --kill gpg-agent Set admin PIN, user PIN, and reset code (optional):
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket) Test SSH:
ssh -T git@github.com # Should prompt for PIN then authenticate Sign a file gpg --sign document.txt # Prompts for PIN on the dongle Decrypt a file gpg --decrypt secret.gpg List keys on card gpg --card-status Change PIN gpg --card-edit gpg/card> admin gpg/card> passwd Step 7: Backup & Recovery Critical : Backup your revocation certificate immediately:
You need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More Information