Factory Reset Heads 2.0

Razões para reiniciar para as configurações de fábrica

• A sua Nitrokey está bloqueada (por exemplo, devido a várias entradas PIN incorrectas)

• Perdeu a sua Nitrokey (caso em que vai precisar primeiro de uma nova)

• Você mesmo instalou um sistema operacional (por exemplo, após trocar o disco rígido)

• O seu sistema operacional não inicia

Aviso

All data on the Nitrokey will be lost if you reset your device. Therefore please backup your data before performing the reset.

Procedimento

1. Ligue a sua Nitrokey ao NitroPad.

2. Liga o NitroPad.

3. Seleccione «Opções».

4. Select “OEM-Factory Reset /Re-Ownership”.

5. Confirm Reset with “Continue”.

6. The integrity of your Setup will be tested, deppending on your reason to perform the reset this can fail continue with ok anyways

7. The following Question can all be answered with the Default. Just hit enter if you only want to reset your device.

Would you like to change the current LUKS Disk Recovery Key passphrase?
 (Highly recommended if you didn't install the Operating System yourself, so that past provisioned passphrase would not permit to access content.
 Note that without re-encrypting disk, a backuped header could be restored to access encrypted content with old passphrase) [y/N]: N

Would you like to re-encrypt LUKS encrypted container and generate new Disk Recovery key?
 (Highly recommended if you didn't install the operating system yourself: this would prevent any LUKS backuped header to be restored to access encrypted data) [y/N]: N

The following security components will be provisioned with defaults or chosen PINs/passwords:

TPM Ownership password
GPG Admin PIN
GPG User PIN

Would you like to set a single custom password that will be provisioned to previously stated security components? [y/N]: N

Would you like to set distinct PINs/passwords to be provisioned to previously stated security components? [y/N]: N

Would you like to set custom user Information for the GnPG key?[y/N]: N

Would you like to set custom user information for the GnuPG key? [y/N]: N

Checking for USB Security Dongle...

Detecting and setting boot device...

Boot device set to /dev/nvme0n1p2

Resetting TPM...

Resetting GPG Key...
(this will take around 3 minuts...)

Changing default GPG Admin PIN

Changing default GPG User PIN

Reading current firmware
(this will take a minute or two)

Adding generated key to current firmware and re-flashing...

Signing boot files and generating checksums

8. It will show the Default GPG PINS and TPM Password

9. confirm the subsequent restart.

10. Após o reinício, o segredo OTP deve ser criado. Confirme o processo com Enter.

11. Enter TPM Password (Default: 12345678)

12. Scan QR COde with Phone to inport TOTP Seceret (Optional) and hit Enter

13. When prompted, enter the Admin PIN of your Nitrokey (Default: 12345678) and hit Enter

14. Você deve então acessar o menu Iniciar.

15. Pressione Enter para iniciar a «Bota por defeito».

Nota

Se você vir a mensagem de que ainda não existe um padrão, por favor siga o procedimento descrito em «Solução de problemas»: Menu de arranque por defeito».