I know PIV and OpenPGP are separate standards and independent applications in the YubiKey, but for newcomers like me they look very similar with their signing, encryption and authentication keys, use cases, etc.

After setting up my YubiKey with OpenPGP keys I'm wondering: is it advisable, useful and/or secure to load the PIV slots with certificates issued for the same keys used for OpenPGP?

New contributor
juanii is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • You could potentially create separate GPG subkeys for the same key, and load them in each separate slot. – Natanael Apr 15 at 16:45
  • I'm already creating three separate subkeys (signing, encryption and authentication) and loading them on each OpenPGP slots. What I meant was issuing certificates for those same three keys and load them on the PIV slots. So no matter if I sign a message through OpenPGP or PIV, the signing key would be the same and hence the signature. – juanii Apr 15 at 18:53

Your Answer

juanii is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.