You may need to “Unblock PIN” before changing it.You can change it a shorter value but it will break things later on. PIN must be at least 6 characters long.Keep these points in mind while reading the guide: See the instructions in this excellent guide. I strongly recommend changing these before continuing. The default Admin PIN is 12345678 and the default PIN is 123456. The normal bin secures reading from the card. The Admin PIN secures operations to the card. You should see the list of available apps on the left when CCID is activated. You’ll be prompted to unplug and plug back in the YubiKey. Check all the boxes and follow the on-screen instructions. Change that by pressing the “Change Connection mode” button.

You may only see “OTP+UTF” in your window. This example shows the desired final state. ykpersonalize examples do the same thing. Other guides use the ykpersonalize command. I think it’s better to cover this now because this guide is all about configuring gpg and YubiKey from the get go. This step was thrown into the middle or end of the guides I read. brew install ykneomgr # If you want the ykpersonalize CLI brew cask install yubikey-neo-manager # If you want the GUI I’m calling this out because some guides I followed did not cover this part. The YubiKey supports multiple modes, so it should not impact your current YubiKey’s functionality. Some guides mention the CLI or use the GUI. brew tap homebrew/versions brew install gnupg21 pinentry-mac The YubiKey tools can be installed as a GUI or a CLI. I assume you have brew installed on your machine. The setup may work on gpg 2.0, but it’s untested. I bumbled around in this area with some bugs because I installed gpg 2.0. Hopefully this post helps you with your own security practices. This was a stumbling journey for me, but eventually I made it. Have all this working on the latest macOS.SSH access via gpg when my YubiKey plugged in.This post details how I achieved my desired end state of: I could use PGP together with my YubiKey (Neo model) to secure large parts of my digital life. It was clear to me that moving to PGP via GnuPG was the first step. I’ve spent some time covering researching ideas and talking to others. I wrote previously about trying to secure my digital life. Securing My Digital Life: GPG, Yubikey, & SSH on macOS

Yubikey mac