<div dir="auto">Change PIN only after uploading keys.<div dir="auto"><br></div><div dir="auto">Yes, I fell for that too when i first tried Gnuk. I ended up purchasing gemalto flasher.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sep 27, 2017 7:02 AM, <<a href="mailto:gnuk-users-request@lists.alioth.debian.org">gnuk-users-request@lists.alioth.debian.org</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send gnuk-users mailing list submissions to<br>
<a href="mailto:gnuk-users@lists.alioth.debian.org">gnuk-users@lists.alioth.<wbr>debian.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.alioth.debian.org/mailman/listinfo/gnuk-users" rel="noreferrer" target="_blank">https://lists.alioth.debian.<wbr>org/mailman/listinfo/gnuk-<wbr>users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:gnuk-users-request@lists.alioth.debian.org">gnuk-users-request@lists.<wbr>alioth.debian.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:gnuk-users-owner@lists.alioth.debian.org">gnuk-users-owner@lists.alioth.<wbr>debian.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of gnuk-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Error changing the PIN: Conditions of use not satisfied<br>
(Vagrant Cascadian)<br>
2. Re: Error changing the PIN: Conditions of use not satisfied<br>
(intrigeri)<br>
<br>
<br>
------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Tue, 26 Sep 2017 22:18:36 -0700<br>
From: Vagrant Cascadian <<a href="mailto:vagrant@debian.org">vagrant@debian.org</a>><br>
To: <a href="mailto:gnuk-users@lists.alioth.debian.org">gnuk-users@lists.alioth.<wbr>debian.org</a><br>
Subject: [Gnuk-users] Error changing the PIN: Conditions of use not<br>
satisfied<br>
Message-ID: <<a href="mailto:87a81g7m8j.fsf@aikidev.net">87a81g7m8j.fsf@aikidev.net</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
Hey, really excited to try to use gnuk for real!<br>
<br>
With a freshly flashed gnuk 1.2.5 on an FST-01, using Debian Stretch, I<br>
cannot seem to change the PIN. I figured I should set a PIN before<br>
uploading keys to it, and tried following the instructions here:<br>
<br>
<a href="http://www.fsij.org/doc-gnuk/gnuk-passphrase-setting.html" rel="noreferrer" target="_blank">http://www.fsij.org/doc-gnuk/<wbr>gnuk-passphrase-setting.html</a><br>
<br>
Was hoping to get it set up in "admin less mode", but I could probably<br>
handle having an admin and reset pin as well, if that's not really<br>
recommended.<br>
<br>
<br>
I'm not sure if there'se some important step I'm missing, or if<br>
something is genuinely wrong with the gnuk build, the FST-01 hardware,<br>
or somewhere in the gnupg stack:<br>
<br>
$ gpg --edit-card<br>
<br>
Reader ...........: 234B:0000:FSIJ-1.2.5-87023833:<wbr>0<br>
Application ID ...: D276000124010200FFFE8702383300<wbr>00<br>
Version ..........: 2.0<br>
Manufacturer .....: unmanaged S/N range<br>
Serial number ....: 87023833<br>
Name of cardholder: [not set]<br>
Language prefs ...: [not set]<br>
Sex ..............: unspecified<br>
URL of public key : [not set]<br>
Login data .......: [not set]<br>
Signature PIN ....: forced<br>
Key attributes ...: rsa2048 rsa2048 rsa2048<br>
Max. PIN lengths .: 127 127 127<br>
PIN retry counter : 3 3 3<br>
Signature counter : 0<br>
Signature key ....: [none]<br>
Encryption key....: [none]<br>
Authentication key: [none]<br>
General key info..: [none]<br>
<br>
gpg/card> passwd<br>
gpg: OpenPGP card no. D276000124010200FFFE8702383300<wbr>00 detected<br>
Error changing the PIN: Conditions of use not satisfied<br>
<br>
Tried with and without entering "admin" command first. The retry<br>
counter isn't changing, so I'm correctly entering the default pin.<br>
<br>
First was using gnupg from Debian stretch (2.1.18-6), and then tried a<br>
local build of the version on it's way to stable-proposed-updates<br>
(2.1.18-8~deb9u1), since it contained some patches related to scdaemon,<br>
but no luck.<br>
<br>
<br>
Any thoughts or recommended further troubleshooting steps?<br>
<br>
<br>
live well,<br>
vagrant<br>
-------------- next part --------------<br>
A non-text attachment was scrubbed...<br>
Name: signature.asc<br>
Type: application/pgp-signature<br>
Size: 832 bytes<br>
Desc: not available<br>
URL: <<a href="http://lists.alioth.debian.org/pipermail/gnuk-users/attachments/20170926/2b9e702d/attachment-0001.sig" rel="noreferrer" target="_blank">http://lists.alioth.debian.<wbr>org/pipermail/gnuk-users/<wbr>attachments/20170926/2b9e702d/<wbr>attachment-0001.sig</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 27 Sep 2017 08:49:06 +0200<br>
From: intrigeri <<a href="mailto:intrigeri@boum.org">intrigeri@boum.org</a>><br>
To: <a href="mailto:gnuk-users@lists.alioth.debian.org">gnuk-users@lists.alioth.<wbr>debian.org</a><br>
Subject: Re: [Gnuk-users] Error changing the PIN: Conditions of use<br>
not satisfied<br>
Message-ID: <<a href="mailto:85tvzor5zx.fsf@boum.org">85tvzor5zx.fsf@boum.org</a>><br>
Content-Type: text/plain<br>
<br>
Hi,<br>
<br>
Vagrant Cascadian:<br>
> gpg/card> passwd<br>
> gpg: OpenPGP card no. D276000124010200FFFE8702383300<wbr>00 detected<br>
> Error changing the PIN: Conditions of use not satisfied<br>
<br>
I had exactly the same problem a month ago, and IIRC (not sure) I had<br>
to upload an encryption key to the device before I could change<br>
the PIN.<br>
<br>
Cheers,<br>
--<br>
intrigeri<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
______________________________<wbr>_________________<br>
gnuk-users mailing list<br>
<a href="mailto:gnuk-users@lists.alioth.debian.org">gnuk-users@lists.alioth.<wbr>debian.org</a><br>
<a href="https://lists.alioth.debian.org/mailman/listinfo/gnuk-users" rel="noreferrer" target="_blank">https://lists.alioth.debian.<wbr>org/mailman/listinfo/gnuk-<wbr>users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of gnuk-users Digest, Vol 96, Issue 2<br>
******************************<wbr>***********<br>
</blockquote></div><br></div>