Solokey v2

Set PIN

You should set a device PIN for the solokey, so that it cannot be used if it is stolen.

Identify the device name (/dev/hidrawX):

[bash]: Run this on your workstation:

fido2-token -L

This probably shows the device as /dev/hidraw0:

(stdout)

/dev/hidraw0: ......

Set the PIN for the device (/dev/hidraw0):

[bash]: Run this on your workstation:

fido2-token -C /dev/hidraw0

Steps to update the Solokey (v2)

Install solo2-cli

Tip

solo2-cli is only required if you need to update your device.

Find the latest version of solo2-cli

[bash]: Set temporary environment variables

SOLO2_VERSION=0.2.2
PLATFORM=x86_64-unknown-linux-gnu

[bash]: Run this on your workstation:

(set -e
curl -L -o solo2 \
  https://github.com/solokeys/solo2-cli/releases/download/v${SOLO2_VERSION}/solo2-v${SOLO2_VERSION}-${PLATFORM}
sudo install solo2 /usr/local/bin/
rm -f solo2
)

Identify solokey

[bash]: Run this on your workstation:

solo2 list

(stdout)

Solo 2 xxxxxxxxxxx (CTAP+PCSC, firmware 2:20220822.0, locked)

Install udev rules

[bash]: Run this on your workstation:

curl https://raw.githubusercontent.com/solokeys/solo2-cli/main/70-solo2.rules | \
  sudo tee /etc/udev/rules.d/solokey2.rules
sudo udevadm trigger

Update solokey

[bash]: Run this on your workstation:

solo2 update

Tip

You may need to run sudo solo2 update if the udev rules aren’t working correctly.