diff --git a/quorum-vault-system/src/component-documents/openpgp-setup.md b/quorum-vault-system/src/component-documents/openpgp-setup.md index 5ad24a9..d97b35c 100644 --- a/quorum-vault-system/src/component-documents/openpgp-setup.md +++ b/quorum-vault-system/src/component-documents/openpgp-setup.md @@ -23,7 +23,7 @@ as such need to be set up in a manner that minimizes exposure risks. ``` b. Test the variable was set correctly ``` - $ echo $card_id` + $ echo $card_id ``` 1. Set the smart card to require touch for all operations @@ -45,7 +45,7 @@ as such need to be set up in a manner that minimizes exposure risks. 1. Generate a mnemonic, encrypting to a newly-generated key: ``` - $ keyfork mnemonic generate --encrypt-to-self public.asc,output=private.asc --provision openpgp-card,identifier="$card_id" + $ keyfork mnemonic generate --encrypt-to-self public.asc,output=encrypted.asc --provision openpgp-card,identifier="$card_id" ``` Note: The PIN can't use sequential numbers, characters or repeated patterns. @@ -55,7 +55,7 @@ as such need to be set up in a manner that minimizes exposure risks. ``` $ fingerprint="$(sq keyring cert.asc | awk '{ print $2 }')" $ mv public.asc "${fingerprint}.pub.asc" - $ mv private.asc "${fingerprint}.prv.asc" + $ mv encrypted.asc "${fingerprint}.encrypted.asc" ``` 1. Optional: Create duplicate smartcards. @@ -64,7 +64,7 @@ as such need to be set up in a manner that minimizes exposure risks. ``` $ gpg --import *.pub.asc - $ gpg --decrypt *.prv.asc | KEYFORK_PROMPT_TYPE=headless keyfork recover mnemonic --daemon + $ gpg --decrypt $fingerprint.encrypted.asc | KEYFORK_PROMPT_TYPE=headless keyfork recover mnemonic --daemon $ keyfork provision openpgp-card --identifier "$(oct list -i | head -1)" --account-id 0 ``` diff --git a/quorum-vault-system/src/generated-documents/all-levels/pgp-key-provisioning.md b/quorum-vault-system/src/generated-documents/all-levels/pgp-key-provisioning.md index 6a8d833..119065b 100644 --- a/quorum-vault-system/src/generated-documents/all-levels/pgp-key-provisioning.md +++ b/quorum-vault-system/src/generated-documents/all-levels/pgp-key-provisioning.md @@ -24,7 +24,7 @@ **Note: Most steps will simplified to a single command in a future iteration** -**See: [keyfork#73](https://git.distrust.co/public/keyfork/issues/73), [keyfork#74](https://git.distrust.co/public/keyfork/issues/74), [keyfork#76](https://git.distrust.co/public/keyfork/issues/76), [keyfork#77](https://git.distrust.co/public/keyfork/issues/77), [keyfork#78](https://git.distrust.co/public/keyfork/issues/78)** +**See: [keyfork#73](https://git.distrust.co/public/keyfork/issues/73), [keyfork#74](https://git.distrust.co/public/keyfork/issues/74), [keyfork#77](https://git.distrust.co/public/keyfork/issues/77)** 1. If using pre-sealed Cold Bundle unseal as follows: