# Adding GPG Stored Keys **URL:** \ **Category:** SSH, OpenPGP, GPG\ **Created:** [March 3, 2021, 6:59pm UTC](https://onlykey.discourse.group/t/adding-gpg-stored-keys/250 "2021-03-03T18:59:13Z")\ **Posts on this page:** 1\ **Showing post:** 17
**Author:** ![bettyvschmartz](https://yyz2.discourse-cdn.com/free1/user_avatar/onlykey.discourse.group/bettyvschmartz/32/81_2.png) [@bettyvschmartz](https://onlykey.discourse.group/u/bettyvschmartz)\ **Post date:** [April 28, 2021, 6:29pm UTC](https://onlykey.discourse.group/t/adding-gpg-stored-keys/250/17 "2021-04-28T18:29:16Z")
You’ll see that @George had the exact same problem here with stored keys [Shared Key between GnuPG and WebCrypt](https://onlykey.discourse.group/t/shared-key-between-gnupg-and-webcrypt/228) > [@Shared Key between GnuPG and WebCrypt](https://onlykey.discourse.group/t/shared-key-between-gnupg-and-webcrypt/228/1): > > Issues: > > - `onlykey-gpg init "foobar" -sk 102 -dk 101 --i ~/public.asc` fails (error reading key: No secret key) > - Webcrypt hangs when attempting to perform decryption operation with loaded ECC keys. I don’t get the WebCrypt issue he mentions in the thread but you confirm you made some changes to WebCrypt that fixed that problem so that’s most likely why. He confirms the same issue all the way through the thread: > [@Shared Key between GnuPG and WebCrypt](https://onlykey.discourse.group/t/shared-key-between-gnupg-and-webcrypt/228/3): > > I get the same error as before when trying to use stored keys for OpenGPG with protonmail ed15519 keys too. And that the same problem exists for both ProtonMail loaded key and GPG loaded keys. The error is thrown `gpg: error reading key: No secret key`. Goes on to say: > [@Shared Key between GnuPG and WebCrypt](https://onlykey.discourse.group/t/shared-key-between-gnupg-and-webcrypt/228/8): > > With the other half of my problem, I’ve tried loading stored keys both on Fedora and Debian - same error. The problem occurs when trying to read the private key, using the helper script in .gnupg/onlykey. > It seems to be attempting to access the private key before connecting to the OnlyKey: > > - Using generated keys works, as mentioned. > - When using generated keys, if the OK is not connected, it errors out, as expected. > - Try running the command to load a stored key, and it makes no difference whether the key is even connected - the code to connect to the OK interface is not run, before trying to list the private keys. Using generated keys works which is what I have confirmed. In Stored Key Mode it looks like it’s not connecting to the OnlyKey before trying to list the PK, which makes complete sense as to why there is `no secret key` error. The conclusion here was that it’s not reproducible and that maybe it’s because he’s using QubesOS: > [@Shared Key between GnuPG and WebCrypt](https://onlykey.discourse.group/t/shared-key-between-gnupg-and-webcrypt/228/19): > > Have you reproduced issue on non-qubes systems? Qubes has some unique things like USB blocking that may cause this. Yet it seems he confirmed it on Debian and Fedora as per his reply earlier (which I’ve re-quoted above), and I’ve also confirmed it on Ubuntu. Also for completeness: > [@Shared Key between GnuPG and WebCrypt](https://onlykey.discourse.group/t/shared-key-between-gnupg-and-webcrypt/228/20): > > I believe the trezor gpg agent works in Qubes, as well as the OnlyKey gpg agent using generated keys. I’ve used a Trezor on QubesOS and can confirm that works fine as long as you pass through to the USB VM correctly, for the record. He’s also confirmed generated keys worked on QubesOS so you’d expect Stored Keys would too. In conclusion, I think this is a bug. Looks like the keys are loaded fine which I’ve confirmed using WebCrypt. It seems the problem lies in not being able to read the PK properly. I see in your examples you’re using the Trezor build rather than the OnlyKey one - maybe this is the problem? – BVS --- _[View the full topic](https://onlykey.discourse.group/t/adding-gpg-stored-keys/250)._