diff --git a/kms/yubikey/yubikey.go b/kms/yubikey/yubikey.go index 732921c8..6f2a5c18 100644 --- a/kms/yubikey/yubikey.go +++ b/kms/yubikey/yubikey.go @@ -141,7 +141,7 @@ func (k *YubiKey) CreateSigner(req *apiv1.CreateSignerRequest) (crypto.Signer, e } priv, err := k.yk.PrivateKey(slot, cert.PublicKey, piv.KeyAuth{ - PIN: k.pin, + PIN: k.pin, PINPolicy: piv.PINPolicyAlways, }) if err != nil {