SSH Private Key via Apex Flex

Support
21

Awesome!! What did you have to do? Post up your technique for others.

1 Like
22

I started doing some write-ups and rather upsettingly my implant seems to have stopped responding :cry:

23

Does it still register when listing cards using pcsc_scan?

24

No nothing :frowning:

25

I can’t help with the implant not responding, but I can say for posterity that:

  • Using a -sk type key is definitely the right way to use SSH keys with a smartcard like these in 2023
  • You can debug libfido2 issues by setting the environment variable FIDO_DEBUG=1 when running a command like openssh
  • You should use -O resident when creating an SSH key unless you want to require both the smartcard and a file on your computer to use the key
  • In order to have libfido2 connect to your smartcard, it must be compiled with PC/SC support, and that’s not the default
1 Like