Problems with nitrokey on qubes os, cant boot help!

Hi,

I use Qubes Os with heads 2.0 on A nitropad n41.

After my last domo update I had to update my checksums, but heads could not detect my Nitrokey. I thought, because a small part of my nitrokey 3a mini is broken on the Outside, the key could have been broken so I ordered a New one.

Now I tried after the documntation to reset OEM with my New key, but after 6. I get the error Settinh key to Nist-P256 in usb security dongle failed.

After restarting the system says: Nitrokey coulndt generate totp code. then i try to generate hotp/totp secret, enter the TPM owner pw (12345678), enger nitrokey admin key (12345678), it blinks, i touch, thrn error status code 32, touch was not recognized or tgere was other Problem with the authentication error setting hotp secred on nitrokey failed

Plesse help, I have important work to do and no access to my Computer :frowning:

to my knowledge you can igore the HOTP requirement, use the Nitrokey App to setup the Nitrokey, reboot and start over

also Troubleshooting - Nitrokey Documentation

I installed the nitrokey APP in another Computer, updates the Firmware, have set a pin for my New nitrokey 3a.

I Tried generate new TOTP/HOTP secret,

Then I get the error: Unable to find Nitrokey, press enter to continue. In both USB hubs.

You can’t simply generate new TOTP/HOTP with a new key. Once you change the Nitrokey registered with Heads, you need to follow Factory Reset Heads 2.0 - Nitrokey Documentation

If you have data on the PC, you should first boot without key to see if there is something to back up. I don’t know what the “status code 32” from your first post means, but what I would also do, is use the old key on your second PC to update its firmware and try again with it before a factory reset.

Hello,

I think you need to update your Heads firmware to 2.5.0

“The v1.7.1 NK3 firmware won’t work with older HEADS versions”

(1.7.1 and newer)

I have the same problem. I just recently bought a V54 with a Nitrokey 3C NFC (and apparently HEADS 2.6.1 installed, which hasn’t been finally released yet), and later decided to buy a 3A mini to replace the 3C. So I did a HEADS factory reset, which ended with the exact same error, “Setting key … failed”. I was lucky I still had the 3C, and I was able to do another factory reset back to it.

Since OP also has a 3A mini, maybe the problem is with this specific type and batch? Are there any updates on this topic?

Hello,

no I think this is related to a recent bug that had the 1.8.2 release whith OpenPGP reset.

If your Nitrokey is running 1.8.2 then you should update it to 1.8.3 which fix this.

1 Like

Hi, I can confirm that updating to 1.8.3 did work for me, and I was able to finish the factory reset with my new key. In case other newbies are trying to do this in Qubes OS, here is how you do it: Firmware Update With Qubes OS - Nitrokey Documentation - I thought it is worth mentioning since my first attempt failed before I found that page.

Thanks for your help @alexandre!

1 Like