Gpg Dongle Setup Apr 2026

Host * IdentityFile ~/.ssh/id_rsa_gpg.pub IdentitiesOnly yes Enable SSH agent forwarding in ~/.gnupg/gpg-agent.conf :

Reader ...........: Yubico YubiKey OTP+FIDO+CCID 0 Application ID ...: D276000124010200... Version ..........: 3.4 Manufacturer .....: Yubico If not detected, restart pcscd : gpg dongle setup

# PC/SC driver pcsc-driver /usr/lib/libpcsclite.so # Disable CCID (for YubiKey) disable-ccid # Enable card removal notification card-timeout 5 Edit ~/.gnupg/gpg-agent.conf : Host * IdentityFile ~/

gpg --card-edit Within the interactive shell: keytocard Select destination slot (1=Sign

gpg --edit-key YOUR_KEYID gpg> keytocard Select destination slot (1=Sign, 2=Encrypt, 3=Authenticate). Repeat for each subkey. Extract the authentication key for SSH:

export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket) Test SSH: