Overview
This guide is intended to provide basics of using adding a certificate on Yubikey to ssh-agent and forwarding it via ssh to use on remote host.
Prerequisites
- Yubikey Smartcard Setup via Windows CA-issued Certificate (Yubikey Manager) - ITS Operations - RIT Wiki
OR - Yubikey Smartcard Setup via Self-Signed Certificate (Yubikey Manager)
- Certificate should be attested and pushed to intended servers via Yubikey Attestation Verification - Linux
OpenSC packages and/or libraries
<insert package manager> install opensc
Setup
Install Software
Once a Smartcard has been setup and configured: