Trezor Setup

This page serves as a basic guide for seting up and taking the first steps on using a Trezor key.

We currently use Trezor keys for authenticating to application servers, sign commits and push code to repos and MFA with AWS. This guide serves as an initial configuration for the dependencies needed for using the physical devices.

• Log into trezor.io to download required plugins for connection to your browser.

• Install libusb

brew install libusb

• Install python3, downloading from the following link https://www.python.org/downloads/release/python-373/

• Install pip3

curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py

python3 get-pip.py

• Verify that the installation is correct:

which pip3

• Install Trezor Agent

pip3 install Cython hidapi

pip3 install trezor_agent

• Install Pinentry to unlock Trezor

brew install pinentry

• Get device's public key (device_id can be found on homescreen)

trezor-agent device_id

• GIT Usage

trezor-agent username git <command>

• Install GPG Tools, downloading DMG from https://gpgtools.org/

• Create new GPG key, follow instructions at https://wiki.trezor.io/GPG

• Setup con computer for ssh usage

echo '# <ssh://trezor_id|nist256p1>' >> ~/.ssh/config

echo 'alias trez="trezor-agent ~/.ssh/config --"' >> ~/.zshrc

• SSH connection to remote server

trez ssh username@remote-server-ip