diff --git a/doc/__update_web b/doc/__update_web new file mode 100644 index 0000000..c52612d --- /dev/null +++ b/doc/__update_web @@ -0,0 +1,3 @@ +cd _build +rsync -rntpv html/ atom.fsij.org:/home/fsij/gnuk-doc-html/ +rsync -rtpv html/ atom.fsij.org:/home/fsij/gnuk-doc-html/ diff --git a/doc/gnuk-personalization.rst b/doc/gnuk-personalization.rst index 7aab551..3c1bc46 100644 --- a/doc/gnuk-personalization.rst +++ b/doc/gnuk-personalization.rst @@ -33,7 +33,22 @@ It shows the status of the card (as same as the output of ``gpg --card-status``) Then, GnuPG enters its own command interaction mode. The prompt is ``gpg/card>``. -Firstly, I change PIN of card user from factory setting (of "123456"). Note that, only changing PIN of user enables "admin less mode" of Gnuk. Admin password will become same one of user's. :: +In the OpenPGPcard specification, there are two passwords: one is +user-password and another is admin-password. In the specification, +user-password is refered as PW1, and admin-password is refered as PW3. + +Note that people sometimes use different words than "password" to +refer same thing, in GnuPG and its applications. For example, the +output explained above includes the word "PIN" (Personal +Identification Number), and the helper program for input is named +"pinentry". Note that it is OK (and recommended) to include +characters other than digits for the case of OpenPGPcard. + +Besides, some people sometimes prefer the word "passphrase" to +"password", as it can encourage to have longer string, but it means +same thing and it just refer user-password or admin-password. + +Firstly, I change PIN of card user from factory setting (of "123456"). Note that, by only changing user's PIN, it enables "admin less mode" of Gnuk. "Admin less mode" means that admin password will become same one of user's. That is, PW1 = PW3. Note that *the length of PIN should be more than (or equals to) 8* for "admin less mode". :: gpg/card> passwd gpg: OpenPGP card no. D276000124010200F517000000010000 detected @@ -48,6 +63,13 @@ Firstly, I change PIN of card user from factory setting (of "123456"). Note tha Repeat this PIN: PIN changed. +The "admin less mode" is Gnuk only feature, not defined in the +OpenPGPcard specification. By using "admin less mode", there will be +only a sigle password to memorize, and it will be easier if a token +is used by an individual. + +(If you want normal way ("admin full mode" in Gnuk's term), that is, user-password *and* admin-password independently, please change admin-password at first. Then, the token works as same as OpenPGPcard specification with regards to PW1 and PW3.) + Secondly, enabling admin command, I put name of mine. Note that I input user's PIN (which I set above) here, because it is "admin less mode". :: gpg/card> admin