On Mittwoch, 5. Juni 2024 19:06:54 CEST Raghav Gururajan via Gnupg-users wrote: > How do I restructure my keys from current/old setup to new setup? > > Current/Old Setup: > PrimaryKey - CS > SubKey - E > > New Setup: > PrimaryKey - C > SubKey1 - E > Subkey2 - S > > I think of two options. > > Option 1: > Create new SubKey with E-only and change usage of PrimaryKey to C-only.
Just create a new S-only subkey. There's no need to remove the S capability from the primary key because the signing key is only used by yourself and you know that you want to use the subkey for signing. > The major caveat is I'll have to update the fingerprint of signing key > at multiple places. Not really. At least not for gpg because gpg will automatically use the newest signing (sub)key for signing data (unless you specified the signing key with trailing exclamation mark). Regards, Ingo
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users
