YubiKey

Configuring YubiKey as PIV SmartCard for SSH

sudo add-apt-repository ppa://yubico/stable
sudo apt update
sudo apt install yubikey-manager

Note: yubikey-manager good enough for cli. yubikey-piv-manager requires qt dependencies.

Reset the YubiKey and set new mgm-key, pin, and puk

ykman piv reset

Setup new mgm-key, pin, and puk

yubico-piv-tool -a set-mgm-key -n <key>
yubico-piv-tool -a change-pin -P123456 -N <pin>
yubico-piv-tool -a change-puk -P12345678 -N <puk>

URLs for info

SSH /w PIV

Generate Keys Using OpenSSL

ykman Piv Delete