Solokey v2

Archived

I no longer maintain this book. I have moved my own workstations to NixOS, where the entire system is declared in one reproducible Git repo rather than assembled by hand. The Fedora Atomic notes here are left up for reference, but they are no longer updated. For my current setup, read the NixOS Workstation book instead.

Set PIN

You should set a device PIN for the solokey, so that it cannot be used if it is stolen.

Identify the device name (/dev/hidrawX):

[bash]: Run this on your workstation:

fido2-token -L

This probably shows the device as /dev/hidraw0:

(stdout)

/dev/hidraw0: ......

Set the PIN for the device (/dev/hidraw0):

[bash]: Run this on your workstation:

fido2-token -C /dev/hidraw0

Steps to update the Solokey (v2)

Install solo2-cli

tip

solo2-cli is only required if you need to update your device.

Find the latest version of solo2-cli

[bash]: Set env vars

SOLO2_VERSION=0.2.2
PLATFORM=x86_64-unknown-linux-gnu

[bash]: Run this on your workstation:

(set -e
curl -L -o solo2 \
  https://github.com/solokeys/solo2-cli/releases/download/v${SOLO2_VERSION}/solo2-v${SOLO2_VERSION}-${PLATFORM}
sudo install solo2 /usr/local/bin/
rm -f solo2
)

Identify solokey

[bash]: Run this on your workstation:

solo2 list

(stdout)

Solo 2 xxxxxxxxxxx (CTAP+PCSC, firmware 2:20220822.0, locked)

Install udev rules

[bash]: Run this on your workstation:

curl https://raw.githubusercontent.com/solokeys/solo2-cli/main/70-solo2.rules | \
  sudo tee /etc/udev/rules.d/solokey2.rules
sudo udevadm trigger

Update solokey

[bash]: Run this on your workstation:

solo2 update

tip

You may need to run sudo solo2 update if the udev rules aren’t working correctly.