Yubico Forum

Hi

I've setup a SSH key to be accessed from PKCS#11 according to this guide:
https://developers.yubico.com/yubico-piv-tool/SSH_with_PIV_and_PKCS11.html

I [s]can[s] can not connect when specifying PKCS#11 as source for SSH

I've also verified that it does not work when my Yubikey is not inserted into the USB slot.

When I try to add the key to the SSH Agent then I get the following interaction


Any hints as to why ssh-add nor ssh works according to the guide? Am I using the correct driver?

OS: Mac OS El Capitan
Yubikey PAM enabled for: Login, Screensaver, Sudo
OpenSC: 0.16.0-pre1

Same problem using Ubuntu 16.04. I added the ppa for yubico, installed all the yubico software I could find in it, set up Ubuntu using the recommended script found

https://github.com/dainnilsson/scripts/ ... all/gpg.sh

Same issue. I found this somewhat helpful

https://wikitech.wikimedia.org/wiki/Yubikey-SSH

I created a .ssh/config as recommended, so at least now I can just $ssh host, enter pin, and complete a connection. But if I do

ssh-add -s /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so

It asks

Enter passphrase for PKCS#11

Entering my pin, puk, key, changeme.. nothing works. So I guess I live with ssh host, pin.

Hey,

Follow the notes and try to use brew SSH and explicitly use those binaries not the default ssh.

Alternatively, try using YKCS11 https://developers.yubico.com/yubico-pi ... notes.html