diff --git a/readme.md b/readme.md
index aa85160..f872a7d 100644
--- a/readme.md
+++ b/readme.md
@@ -36,6 +36,13 @@ macOS:
 
 - `PKCS11_MODULE_PATH="/opt/homebrew/lib/libykcs11.dylib"`
 
+### Setting up a new yubikey
+
+The signing key on a yubikey is stored in slot 9a. On a new yubikey this slot is empty.
+
+To generate a new key, run the following command:
+`yubico-piv-tool -a generate -s 9a -A ECCP384`
+
 ### Generating the Root
 
 ```sh