commit 1626e8e644f863fd1102593f3d858d8be31f162b Author: Jared K. Smith jaredsmith@jaredsmith.net Date: Sun Mar 23 10:26:59 2014 -0400

Add my basic docs on the Yubikey Neo

en-US/Security_Guide.xml | 18 +++++++++++------- en-US/Yubikey_Neo.xml | 22 ++++++++++++++++------ 2 files changed, 27 insertions(+), 13 deletions(-) --- diff --git a/en-US/Security_Guide.xml b/en-US/Security_Guide.xml index 2a5ac80..f707385 100644 --- a/en-US/Security_Guide.xml +++ b/en-US/Security_Guide.xml @@ -14,15 +14,19 @@ <xi:include href="SoftwareMaintenance.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> <xi:include href="CVE.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> <chapter> + <title>Yubikey</title> + <xi:include href="Yubikey_Neo.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + </chapter> + <chapter> <title>SELinux</title> <para/> - <xi:include href="Introduction.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> - <xi:include href="Contexts_and_Attributes.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> - <xi:include href="Targeted_Policy.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> - <xi:include href="Working_With_SELinux.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> - <xi:include href="Managing_Users.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> - <xi:include href="Troubleshooting.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> - <xi:include href="Further_Information.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Introduction.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Contexts_and_Attributes.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Targeted_Policy.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Working_With_SELinux.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Managing_Users.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Troubleshooting.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> + <xi:include href="Further_Information.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> </chapter> <xi:include href="Managing_Confined_Services.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> <xi:include href="Encryption_Standards.xml" xmlns:xi="http://www.w3.org/2001/XInclude%22%3E</xi:include> diff --git a/en-US/Yubikey_Neo.xml b/en-US/Yubikey_Neo.xml index 74c5d7a..69d7570 100644 --- a/en-US/Yubikey_Neo.xml +++ b/en-US/Yubikey_Neo.xml @@ -45,18 +45,28 @@ General key info..: [none] <para><command>lang</command> to set your language (<literal>en</literal> for example).</para> <para><command>sex</command> to set your gender.</para> <para><command>quit</command> to quit.</para> - <para><command>gpg --edit-key <literal>fingerprint</literal></command></para> - <para><command>addkey</command> to create a new key</para> - <para><command>RSA (sign only)</command> to create a subkey for signing</para> - <para><command>save</command> to save the key</para> - <para><command>quit</command> to quit</para> + </section> + <section> + <title>Creating the key on the Yubikey Neo</title> + <para><command>gpg --edit-key <replaceable>key-id</replaceable></command></para> + <para><command>addcardkey</command> to generate a new key on the Yubikey Neo</para> + <para>Select <option>Signature key</option>.</para> + <para>Enter the PIN</para> + <para>Unlock your master key</para> + <para>Specify the expiration date for your key -- and yes, please set an expiration date. You can always edit the key and </para> + + </section> +<!-- + <section> + <title>Using gnupg2</title> <para>We can't write to the card from gpg itself, so let's switch to gpg2. First, make sure that gpg2 can see your card by running <command>gpg2 --card-status</command>. If it can't see your card, you probably forgot to install the <package>gnupg2-smime</package> package.</para> - <para>Run <command> sudo gpg2 --no-default-keyring --keyring ~/.gnupg/pubring.gpg --secret-keyring ~/.gnupg/secring.gpg --edit-key <replaceable>fingerprint</replaceable></command></para> + <para>Run <command> sudo gpg2 --no-default-keyring --keyring ~/.gnupg/pubring.gpg --secret-keyring ~/.gnupg/secring.gpg --edit-key <replaceable>key-id</replaceable></command></para> <para><command>toggle</command> to switch between public key and secret key</para> <para>Subkeys are numbered starting with 1, so type <command>key <replaceable>2</replaceable></command> to select the 2nd subkey. Now you'll notice a <literal>*</literal> next to the key.</para> <para><command>keytocard</command> to write the key to the Yubikey Neo.</para> </section> +-->

</section>