From 9fedaa045e00d3aa9cd06c9b450bae3bca0e472b Mon Sep 17 00:00:00 2001
From: Daan Boerlage <d@boerlage.me>
Date: Mon, 12 Feb 2024 21:02:44 +0100
Subject: [PATCH] Document how to generate a key on a new yubikey

---
 readme.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/readme.md b/readme.md
index aa85160..f872a7d 100644
--- a/readme.md
+++ b/readme.md
@@ -36,6 +36,13 @@ macOS:
 
 - `PKCS11_MODULE_PATH="/opt/homebrew/lib/libykcs11.dylib"`
 
+### Setting up a new yubikey
+
+The signing key on a yubikey is stored in slot 9a. On a new yubikey this slot is empty.
+
+To generate a new key, run the following command:
+`yubico-piv-tool -a generate -s 9a -A ECCP384`
+
 ### Generating the Root
 
 ```sh