ykman openpgp set-touch policy wipes out keys when using gpg keytocard

[buddacore]

I'm using ykman to set the touch policy and keytocard for everything else.

Yubikey 5C, 5.7.1

Not having any issues besides the touch policy setting.

1. Set touch policy for openpgp in ykman to "on" for all slots.

$ ykman openpgp keys set-touch sig on

2. "ykman openpgp info" shows touch policy "ON".

3. Use gpg keytocard to add subkeys to all the slots.

4. Result of the above is keys are added without issue, but openpgp touch policy is reset to "OFF".

Using "Fixed" does give a warning that the private keys will be deleted when Fixed is used, but not for "ON".

I've tried this several times, and while the openpgp does work, the touch policy is reset to OFF meaning no physical touch - bummer.

NOTE:

I originally had the openpgp set touch policy to FIXED before I realized that that would clear the private keys for the slots. I reset the openpgp app and restarted. Maybe setting those to FIXED altered the outcome.

The openpgp ATT is set to FIXED, as per my inital setting of all slots to FIXED.

Everything was working back in 2022 when youtuber 402 Payment Required made her yubikey videos.
https://youtu.be/V5sG2M2aWSA?t=292

Thanks!

[dainnilsson]

When you import/generate a new key the touch policy is reset to OFF. You need to first add the key, then set the policy. Setting it to ON will allow you to later set it to OFF. Setting it to ON_FIXED will lock it in place, resetting only when you import/generate a new key over it.