Nitrokey 3: problems with factory-reset and uif change

Nitrokeys Misc
1

Hello!

I use the following software with Nitrokey 3A NFC:
Linux Ubuntu 22.04.3 LTS and gpg (GnuPG) 2.4.3 with libgcrypt 1.10.2.

when I enter a gpg command via Terminal I get the following message before gpg executes the command (I do not know if this is relevant for my problems):

gpg: WARNING: server ‘gpg-agent’ is older than us (2.2.27 < 2.4.3)
gpg: Note: Outdated servers may lack important security fixes.
gpg: Note: Use the command “gpgconf --kill all” to restart them.
gpg: WARNING: server ‘scdaemon’ is older than us (2.2.27 < 2.4.3)
gpg: Note: Outdated servers may lack important security fixes.
gpg: Note: Use the command “gpgconf --kill all” to restart them.

Two functions of my Nitrokey 3A NFC do not work properly with $gpg --edit-card:

factory-reset:

gpg/card> factory-reset
gpg: OpenPGP card no. [my card number] detected

gpg: Note: This command destroys all keys stored on the card!

Continue? (y/N) y
Really do a factory reset? (enter “yes”) yes
sending card command SELECT AID failed: Bad secret key

UIF setting:

gpg/card> uif 1 on
gpg: error for setup UIF: Invalid name

Who can help?

Many thanks in advance.

2

Hi,

when I enter a gpg command via Terminal I get the following message before gpg executes the command (I do not know if this is relevant for my problems):

gpg: WARNING: server ‘gpg-agent’ is older than us (2.2.27 < 2.4.3)
gpg: Note: Outdated servers may lack important security fixes.
gpg: Note: Use the command “gpgconf --kill all” to restart them.
gpg: WARNING: server ‘scdaemon’ is older than us (2.2.27 < 2.4.3)
gpg: Note: Outdated servers may lack important security fixes.
gpg: Note: Use the command “gpgconf --kill all” to restart them.

It looks like you may have 2 gpg version installed and running at the same time.
Does the recommended gpgconf --kill all fix the warning?

3

Hello,

No, when I use the command ‘gpgconf --kill all’ nothing changes. The warning messages still appear and I still cannot change the UIF settings or do factory reset.

4

How and why did you install the gpg 2.4.3 release over the 2.2.7 default?

This guide suggests to install it to /usr/local/bin and override the gpg-agent.conf. Maybe you need that step to update the gpg-agent config.

5

Thanks a lot for this link, I will follow these instructions.
Why I installed gpg 2.4.3? Because I use ubuntu 22.04, it ships with gpg 2.2.27. It is written in Nitrokey manual that at least gpg 2.3 is required in order to use --card-edit (OpenPGP Touch Confirmation (UIF) - Nitrokey Documentation). Therefore I updated to the latest version which is 2.4.3.

6

Thank you. This solved it for me: Update Gpg-Agent Service in your Guide link.

7

Great, thanks for feedback.