gpg --card-status
gpg --card-edit
admin
key-attr
Set to RSA 4096 for all 3 keys
generate
passwd
- > change admin and user PIN
ykman openpgp set-touch enc on
ykman openpgp set-touch aut on
ykman openpgp set-touch sig on
gpgconf —list-dir agent-extra-socket | pbcopy
echo “use-agent” >> ~/.gnupg/gpg.conf
enable-ssh-support
extra-socket /Users/adam/.gnupg/S.gpg-agent.extra
pinentry-program /usr/local/bin/pinentry-mac