工厂重置¶

The multiple identities feature allows to use 3 virtual smart cards in place of one, giving bigger flexibility in the every day use, as well as separation between user identities (business, personal etc.) or even allowing usage of it for more than one user (PINs are separate).

All of the smart cards have separate data objects, meaning they all could have different keys, certificates stored, and PINs set. Identities do not interact between each other.

This means each identity needs to be reset on its own.

旧版本（低于1.2.5）的固件可能需要特殊处理（见下文）。用法 -----

要改变身份，只需发送一个自定义的CCID命令。这可以通过``pynitrokey``工具实现。

Install pynitrokey.

连接你的Nitrokey Start并验证它是否被识别。

$ nitropy start list
   *** Nitrokey tool for Nitrokey FIDO2 & Nitrokey Start
   :: 'Nitrokey Start' keys:
   FSIJ-1.2.15-87042524: Nitrokey Nitrokey Start (RTM.10)

改变身份，将``<ID>``替换为``0``。1，或 2。

$ nitropy start set-identity <ID>
   *** Nitrokey tool for Nitrokey FIDO2 & Nitrokey Start
   Trying to set identity to <ID>4
   device has reset, and should now have the new identity

复位 ¶

$ gpg --card-edit

在菜单中输入 "admin"，然后输入 "factory-reset"。

This will reset the current identity. To reset all identities the following needs to be done:

$ nitropy start set-identity 2`
$ gpg --card-edit` -> admin -> factory-reset
$ nitropy start set-identity 1`
$ gpg --card-edit` -> admin -> factory-reset
$ nitropy start set-identity 0`
$ gpg --card-edit` -> admin -> factory-reset

它删除了与各自身份相关的所有密钥、引脚、配置和元数据。

重置代码 ¶

这一步对于新的固件来说是可选的。你可以添加一个重置代码，使用户PIN码（而不是管理PIN码）得到重置。对于旧的固件，建议使用该代码，因为需要重置设备（见下文）。

查看这里的文档。

固件低于1.2.5 ¶

Nitrokey启动固件1.2.2至1.2.5。¶

如果而且只有在设备没有被封锁的情况下（PIN码没有经常输入错误），您可以使用与较新固件相同的程序（见上文）。你需要重置代码来解锁设备，否则你就不能再使用该设备了。

Nitrokey Start固件1.0。¶

为了重置Nitrokey Start 1.0，你需要为`固件更新<http://no-passwd.net/askbot/question/34/how-gnuk-supports-firmware-upgrade/>`__事先定义一个公钥！如果你的设备被封锁了，你就可以进行固件更新。在设备被封锁的情况下，它使你能够执行固件更新，从而重置设备。