https://docs.daper.io/gnupg/index.htmlRecent content in GnuPG on DocumentationHugo -- gohugo.ioen-ushttps://docs.daper.io/gnupg/gpg/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/gnupg/gpg/index.htmlsource article: https://zeos.ca/post/2018/gpg-yubikey5/#configuring-your-workstation Start by installing GPG Suite and smart card drivers. $ yay -S gnupg ccid opensc Next, I use the following for my ~/.gnupg/gpg.conf file. Make sure to update the default-key parameter to your Key ID. ~/.gnupg/gpg.conf no-greeting require-cross-certification keyserver hkps://keys.openpgp.org keyserver-options no-honor-keyserver-url auto-key-locate https://keys.openpgp.org auto-key-retrieve cert-digest-algo SHA512 default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed personal-digest-preferences SHA512 SHA384 SHA256 SHA224 no-emit-version no-comments keyid-format 0xlong with-fingerprint use-agent default-key 0x?https://docs.daper.io/gnupg/install-key/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/gnupg/install-key/index.htmlUpload to OpenPGP Export and upload the key to https://keys.openpgp.org. Then save the url to your card: gpg --card-edit gpg/card> admin gpg/card> url URL to retrieve public key: <paste the url to your public key> Install card key on a new machine gpg --edit-card gpg/card> fetch gpg/card> quithttps://docs.daper.io/gnupg/renew-subkeys/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/gnupg/renew-subkeys/index.htmlImport the secret master key gpg2 --import KEYID Edit it gpg2 --expert --edit-key KEYID gpp> key 1 ... gpp> key 2 ... gpp> key 3 ... gpg> expire ... Key is valid for? (0) 1y ... Is this correct? (y/N) y ... gpg> save Delete the secret material from your keyring gpg --delete-secret-keys KEYID Export and distribute Now export the public key with the following command. And upload to keys.openpgp.org, then on other machines, use the fetch command from card to retrieve them.