Migrating to Smartcards

[David Tomaschik]

On Tue, Aug 30, 2011 at 2:56 PM, Richard <richard at r-selected.de> wrote:
> On Tue, Aug 30, 2011 at 20:49, David Tomaschik <david at systemoverlord.com> wrote:
>
>> No, you can store a primary key.  And you can use the 3 slots for any
>> purpose (though I believe they must all tie to the same primary key.).
>>  It would be common to combine signing & certification into one key
>> (and I believe that is the default).
>
> So it is impossible to use a separate signing subkey if I want to
> retain the possibility to sign other keys without keeping an off-card
> backup of the primary key? In the past I switched my singing subkeys
> every couple of years, keeping my primary key in place.
>
>    Richard

No, I was just stating common practice.  You could do a
certification/primary key, a signing key, and an encryption key in the
3 slots.



-- 
David Tomaschik, RHCE, LPIC-1
System Administrator/Open Source Advocate
OpenPGP: 0x5DEA789B
http://systemoverlord.com
david at systemoverlord.com