Unable to change "Stored Key User Input Mode" to "Button Press Required"

[altsalt]

While trying to hunt down the solution to loading a new ECC Curve25519 master-key generated with GnuPG 2.2.27 using OnlyKey-App 5.3.3 and OnlyKey-Firmware 2.1.1, I found a thread suggesting that this needs "Stored Key User Input Mode" set to "Button Press Required". However, whenever I try to change this via the OnlyKey-App or onlykey-cli, it does not persist.

My OnlyKey is new, and I've yet to successfully load any keys due to a variety of issues that I've commented on/started.

What information can I provide to help debug this issue?

Thanks!

[onlykey]

Your device must be in config mode to change this setting, if its not you receive this error

However, this setting has nothing to do with loading keys, this is for using keys - https://docs.crp.to/usersguide.html#stored-challenge-mode

For loading keys we recommend following our guide here which includes three supported methods - https://docs.crp.to/importpgp.html

[altsalt]

I've tried to modify this setting before and after having keys loaded into the first three ECC slots, but it still will not persist. Here are screenshots, happy to take further debugging steps.

[onlykey]

This is normal behavior. The setting is set, it doesn't show up in the app as the app is just for setting values and does not read values from key.

[altsalt]

Is there a way to dump the current settings akin to holding 2 for 8+ seconds? For instance, I added labels to the ECC slots, but I can't actually tell if there is a key in them or not. Well, I can, since the web decryption works... Appreciate your responses to everything!

[onlykey]

Currently nothing can be read about keys loaded other than the label set by user in the CLI, we may be able to add a get-public <slot #> in the future this is currently done by the GPG agent but is not supported in the CLI.

One workaround is to use the agent, if you get a public key there is a key in the slot, if not you receive an error (and OnlyKey flashes red):

$ onlykey-agent identity@myhost -sk 101

or for RSA keys

$ onlykey-agent identity@myhost -sk 1 -e rsa