🟣About

Provides descriptions for each type of PIN for the PIV module.

PIN

Personal Identification Number

default: 123456

The PIN is used during normal operation to authorize an action such as creating a digital signature for any of the loaded certificates. Entering an incorrect PIN three times consecutively will cause the PIN to become blocked, rendering the PIV features unusable. The PIN must be at least 6 characters, and can contain any characters, though for cross-platform portability it is recommended to only use decimal digits. There is a limit of 8 bytes for a PIN, which allows for up to 8 ASCII characters

PUK

PIN Unblocking Key

default: 12345678

The PUK is used to reset the PIN if ever lost or blocked after the max number of incorrect attempts. Setting a PUK is optional. If you use your PIN as the Management Key, the PUK is disabled for technical reasons. The requirements and restrictions of the PUK are the same as for the PIN (see above). If PIN complexity is enforced, the same rules are applied to the PUK. If the PUK ever becomes blocked, either by deliberately choosing to block it or by giving the wrong PUK value 3 times, it can only be unblocked by performing a complete reset. A complete reset wipes the entire PIV module. You will lose all PIV keys stored on your Yubikey, and your PINs will be reset to their default values.

MANAGEMENT KEY

default: 010203040506070801020304050607080102030405060708

The PIV management key will be asked for when you perform tasks on your yubikey such as generating new PIV keys. You won't need this most of the time, but it will be required when performing management actions on your yubikey itself.