|
Size: 5278
Comment:
|
Size: 1640
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| #language en ## page was renamed from TechDocs/Card_howtos ## page was renamed from TechDoku/Card_howtos ## page was renamed from Migrated/Card_howtos |
|
| Line 2: | Line 6: |
| Here you can find our howtos for setting up your computer to use your the [[Crypto_Card|Fellowship crypto card]]. | {{{#!wiki warning '''Historical page''' This page is largely historical. The FSFE does not offer smartcards any more. }}} Here you can find our howtos for setting up your computer to use your the [[FellowshipSmartCard|Fellowship smart card]]. |
| Line 5: | Line 15: |
| Basic setup: * [Card_howtos/Card_reader_setup_(udev)|Setting up your card reader on GNU/Linux (udev) * [Card_howtos/Card_reader_setup_(udev)|Setting up your card reader on GNU/Linux (hotplug)] |
Basic setup: Of course, you need [[http://www.gnupg.org|GnuPG]], either `gpg` or `gpg2` will do. We recommend to install `gpg-agent` and `scdaemon` as well. Depending on your system, you may need to configure udev (or hotplug, its predecessor on older systems) to work with your card reader. If `gpg --card-status` (or `gpg2 --card-status`) shows your card’s contents on a freshly booted system, such configuration should not be necessary. * [[/CardreaderSetup | Quick setup for Linux systems]] * [[/CardreaderSetup_(udev)|Setting up your card reader on GNU/Linux (udev)]] * [[/CardreaderSetup_(hotplug)|Setting up your card reader on GNU/Linux (hotplug)]] |
| Line 13: | Line 23: |
| . Using the card with your main key (not recommended) | * [[/CardWithSubkeysUsingBackups|Using the card with subkeys (recommended)]] * [[/SshGnome|Getting gpg-agent and ssh to work on GNOME systems]] * [[/SshOpenSuse|Getting gpg-agent and ssh to work on OpenSUSE systems]] |
| Line 15: | Line 27: |
| gerloff <<MailTo(gerloff AT fsfe DOT org)>> - Wednesday 14 September 2005 | Outdated howtos: * [[/CardWithSubkeys|Using the card with your subkey without backups (not recommended)]] * [[/CardWithMainKey|Using the card with your main key (not recommended)]] |
| Line 17: | Line 31: |
| '''This Howto gives very basic instructions for generating a GnuPG key and setting up your computer for use with the Fellowship card.''' | Howtos for proprietary systems: * [[/WindowsXP|Using the card on Windows XP]] |
| Line 19: | Line 34: |
| You can use your card for several purposes. Since most people will want to use it for mail signing and encryption, this is what we're going to talk about here. This document tries to guide you through the process of setting up your Cryptocard and getting it to do what you want it to do in a not-too-technical fashion. For a start, we will only consider the situation where you generate a new GnuPG key to put onto your Cryptocard. This is the case for people who are using GnuPG for the first time. {{{ #!wiki note '''Please Note''' This is only an introductory document, aimed at a generic hard- and software setting involving GNU/Linux. For a full-length description please see the [[http://www.gnupg.org/howtos/card-howto/en/smartcard-howto.html|full-length Fellowship crypto card Howto]]. If you run into problems specific to your GnuPG setup, you may want to read other GnuPG Howtos. }}} What do you need to use the card? * You will need something to stick your card into: A smartcard reader. There are several on the market. Pick the one that best suits your needs. (Advice: The SCR 335 is small and portable, but crashes very frequently unless connected via an USB hub. And its firmware cannot be upgraded.) * Since you are going to install programs, you will need root privileges on your computer. * You will also need an installation of GnuPG 1.4.2 or higher on your computer. Debian and Ubuntu GNU/Linux users can get this on the command line via $apt-get install gnupg. All others please refer to the GnuPG download section for information and download links. Generating a key for your card First set up your card reader by following our card reader howto (hotplug). For newer systems, please follow the card reader howto (udev) To modify the contents of your card, use the following command: {{{ $ gpg --card-edit }}} GnuPG will start again, this time giving you its own command line and awaiting your orders. You can now start to generate your own GPG key and copy it onto the card. First, enter the GnuPG's administrator mode: {{{ command> admin }}} Then, tell GnuPG to generate a key for you: {{{ command> generate }}} You will be asked if you would like to make an off-card copy of the encryption key. It is useful to say yes here. Choose if your key should expire after a certain time. Now you are asked for your real name, your email address and a comment (you don't have to enter a comment). Then confirm your information with "o". When you are asked for a passphrase, leave it blank. Now you should be able to use your Smartcard the usual way one would use GnuPG, but instead of typing in a passphrase you have to enter the PIN. Have a lot of fun with your Fellowship card! . Using your Card with subkeys only (recommended) This howto has been moved [[Card_howtos/Card_with_subkeys|here]]. . Using your card on Mac OS X {{{ #!wiki warning '''Warning''' Mac OS X is a non-free operating system! This means it takes away your freedoms to use, study, share and improve the software. }}} There was a howto about using your [[http://www.py-soft.co.uk/~benjamin/download/mac-gpg/|cryptocard on Mac OS X]]. But it seems to be not available any more. . Using your card on Windows XP {{{ #!wiki warning '''Warning''' Windows is a non-free operating system! This means it takes away your freedoms to use, study, share and improve the software. }}} Presumed you already have a smart card reader. You need also to install GnuPG for Windows. GnuPG for Windows can be downloaded from here: http://www.gpg4win.org/download.html Go to prompt mode (execute cmd.exe); gpg --help will give you the list of commands and options available. In order to modify the content of your card, use: gpg --card-edit More useful information on GnuPG, which is to a very large extent applicable for Win machines, can be found here: http://www.gnupg.org/howtos/card-howto/en/smartcard-howto-single.html#id2456468 . Getting ssh to work on GNOME systems Some GNOME users may find that the card works on their system but there is a problem with getting ssh subkeys on the card to work. This is a problem causes by gnome-keyring. This application is taking control of the ssh socket and preventing gpg-agent from working properly. You can fix this by issuing the following command in a terminal: {{{ command> gconftool-2 --set -t bool /apps/gnome-keyring/daemon-components/ssh false }}} This fix for this problem was originally discussed here: http://www.gossamer-threads.com/lists/gnupg/users/43682 . <<BR>> |
|
| Line 109: | Line 36: |
| CategoryCardhowtos | [[Category/HowTo]] |
Historical page
This page is largely historical. The FSFE does not offer smartcards any more.
Here you can find our howtos for setting up your computer to use your the Fellowship smart card.
Basic setup: Of course, you need GnuPG, either gpg or gpg2 will do. We recommend to install gpg-agent and scdaemon as well. Depending on your system, you may need to configure udev (or hotplug, its predecessor on older systems) to work with your card reader. If gpg --card-status (or gpg2 --card-status) shows your card’s contents on a freshly booted system, such configuration should not be necessary.
Using the card:
Outdated howtos:
Howtos for proprietary systems: