For a provisioning script, we need a way to verify that the PIN the user entered is correct (they often forget).
the older yubico-piv-tool offered -a verify-pin to do this, but we try to avoid this one, since it does not have an option to identify the yubikey through its serial number.
there exists a ykman fido access verify-pin, but the fido pin may be different or not even used.
For a provisioning script, we need a way to verify that the PIN the user entered is correct (they often forget).
the older
yubico-piv-tooloffered-a verify-pinto do this, but we try to avoid this one, since it does not have an option to identify the yubikey through its serial number.there exists a
ykman fido access verify-pin, but the fido pin may be different or not even used.