diff options
| author | Chloe Surett <chloe@surett.me> | 2026-01-17 03:55:52 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-01-17 09:55:52 +0100 |
| commit | 6cb2ba4c8dcb53430703fc10bc5d4d09e4b74df6 (patch) | |
| tree | 7644472d2f3bd3cf2e200beec136644657e50be7 /docs | |
| parent | 7f04142de6a7ede97df92162f3405701adb1962b (diff) | |
| download | vyos-documentation-6cb2ba4c8dcb53430703fc10bc5d4d09e4b74df6.tar.gz vyos-documentation-6cb2ba4c8dcb53430703fc10bc5d4d09e4b74df6.zip | |
ssh: T7483: Document fido2 options (#1708)
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/configuration/service/ssh.rst | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst index 90a28a34..4bb5af95 100644 --- a/docs/configuration/service/ssh.rst +++ b/docs/configuration/service/ssh.rst @@ -60,6 +60,14 @@ Configuration Disable password based authentication. Login via SSH keys only. This hardens security! +.. cfgcmd:: set service ssh fido pin-required + + Require FIDO2 keys to attest that a user has been verified (e.g. via a PIN). + +.. cfgcmd:: set service ssh fido touch-required + + Require FIDO2 keys to attest that a user is physically present. + .. cfgcmd:: set service ssh disable-host-validation Disable the host validation through reverse DNS lookups - can speedup login |