Desired behavior: Keys in the Slots 0x9d and 0x82 – 0x95 Can be used as encryption keys
Reason: I would like use the retired keys slots to store old keys
Observed behavoiour: only Keys in the Slot 0x9d can be used as encryption keys, keys in slot 0x82 – 0x95 canntot be used
The Yubikey provided utilities show that the key exists:
$ yubico-piv-tool -a status Version: 5.1.2 Serial Number: 10114510 CHUID: 3019d4e739da739ced39ce739d836858210842108421c84210c3eb34102dbe5858f8fc511b186e42b664f8ba01350832303330303130313e00fe00 CCC: f015a000000116ff02e7b9ec5dc46e7e5e3761b1c20f62f10121f20121f300f40100f50110f600f700fa00fb00fc00fd00fe00 Slot 9a: Algorithm: RSA2048 Subject DN: CN=CAcert WoT User/emailAddress=XXXXXX Issuer DN: O=CAcert Inc., OU=http://XXXXX, CN=XXXX Fingerprint: 826[...] Not Before: Dec 28 00:08:36 2019 GMT Not After: Dec 27 00:08:36 2021 GMT Slot 9c: Algorithm: RSA2048 Subject DN: C=DE, CN=XXXXXXXX Issuer DN: C=BE, O=XXXXXXX Fingerprint: 69ed[...] Not Before: Jan 15 14:24:57 2020 GMT Not After: Jan 15 14:24:57 2023 GMT Slot 9d: Algorithm: RSA2048 Subject DN: emailAddress=XXXXX Issuer DN: C=XXXXXXXXXX Fingerprint: 4203[...] Not Before: Nov 8 00:00:00 2019 GMT Not After: Nov 7 23:59:59 2022 GMT Slot 9e: Algorithm: RSA2048 Subject DN: C=DE, ST=North Rhine-Westphalia, [...] Issuer DN: C=DE, ST=North Rhine-Westphalia, [...] Fingerprint: 0905[...] Not Before: Jan 14 21:15:28 2020 GMT Not After: Jan 13 21:15:28 2022 GMT Slot 82: Algorithm: RSA2048 Subject DN: CN=XXXXXXX Issuer DN: CN=XXXXXXXX Fingerprint: f50c[...] Not Before: Dec 17 19:04:46 2019 GMT Not After: Dec 14 19:04:46 2029 GMT PIN tries left: 10
The keys seams to get listed, but can not be selected:
2022-01-12 22:00:01 scdaemon[15338] DO 'Retired Cert Key Mgm 1': 5382036170820358308203543082023c[...]
$ grep "DO " ~/Library/Logs/scdaemon-dev.log 2022-01-12 21:31:23 scdaemon[12833] DO 'Card Capability Container': 5333f015a000000116ff02e7b9ec5dc4[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Cardholder Unique Id': 533b3019d4e739da739ced39ce739d83[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Cert PIV Authentication': 5382055e708205553082055130820339[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Cardholder Fingerprints' not available: Bad PIN 2022-01-12 21:31:23 scdaemon[12833] DO 'Security Object' not available: No such file or directory 2022-01-12 21:31:23 scdaemon[12833] DO 'Cardholder Facial Image' not available: Bad PIN 2022-01-12 21:31:23 scdaemon[12833] DO 'Cert Card Authentication': 538206d0708206c7308206c3308204ab[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Cert Digital Signature': 53820508708204ff308204fb308203e3[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Cert Key Management': 5382051f7082051630820512308203fa[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Printed Information' not available: Bad PIN 2022-01-12 21:31:23 scdaemon[12833] DO 'Discovery Object': 7e124f0ba0000003080000100001005f[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Key History Object': 5308c10114c20100fe00 2022-01-12 21:31:23 scdaemon[12833] DO 'Retired Cert Key Mgm 1': 5382036170820358308203543082023c[...] 2022-01-12 21:31:23 scdaemon[12833] DO 'Cardholder Iris Images' not available: Bad PIN 2022-01-12 22:00:01 scdaemon[15338] DO 'Card Capability Container': 5333f015a000000116ff02e7b9ec5dc4[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Cardholder Unique Id': 533b3019d4e739da739ced39ce739d83[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Cert PIV Authentication': 5382055e708205553082055130820339[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Cardholder Fingerprints' not available: Bad PIN 2022-01-12 22:00:01 scdaemon[15338] DO 'Security Object' not available: No such file or directory 2022-01-12 22:00:01 scdaemon[15338] DO 'Cardholder Facial Image' not available: Bad PIN 2022-01-12 22:00:01 scdaemon[15338] DO 'Cert Card Authentication': 538206d0708206c7308206c3308204ab[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Cert Digital Signature': 53820508708204ff308204fb308203e3[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Cert Key Management': 5382051f7082051630820512308203fa[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Printed Information' not available: Bad PIN 2022-01-12 22:00:01 scdaemon[15338] DO 'Discovery Object': 7e124f0ba0000003080000100001005f[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Key History Object': 5308c10114c20100fe00 2022-01-12 22:00:01 scdaemon[15338] DO 'Retired Cert Key Mgm 1': 5382036170820358308203543082023c[...] 2022-01-12 22:00:01 scdaemon[15338] DO 'Cardholder Iris Images' not available: Bad PIN