3 ms·
The thing missing for me is, how to set 2 yubikeys to be functionally the same, to make having a backup key easier (for situations where no data is added to the
by its-summertime 4y ago
The thing missing for me is, how to set 2 yubikeys to be functionally the same, to make having a backup key easier (for situations where no data is added to the key)
- sedatk 4y agoYou have to register each key individually.
- fullstop 4y agoThis is trickier with TOTP, since you either have to have multiple keys on you or you have to save the TOTP seed / QR code until you have access to the other keys.
- sneakerblack 4y agoIt really depends on what you want to do with the yubikeys. If you're just using the PGP functionality (like SSH-ing and signing git commits) all you have to do is upload the same private (sub)keys to the two yubikeys and they'll be functionally the same*. I wouldn't know about other (more advanced) features though. If you follow DrDuh's guide, you should be able to set up the yubikeys in the way I described. I also created some provisioning scripts that automate the whole process which you should be able to use to provision the PGP applet: https://github.com/santiago-mooser/yubikey-provisioning-scripts https://github.com/santiago-mooser/yubikey-provisioning-scri... Make sure to enable the export of the private key though!