diff options
Diffstat (limited to 'docs/configuration/service/ssh.rst')
| -rw-r--r-- | docs/configuration/service/ssh.rst | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst index 90a28a34..4bb5af95 100644 --- a/docs/configuration/service/ssh.rst +++ b/docs/configuration/service/ssh.rst @@ -60,6 +60,14 @@ Configuration Disable password based authentication. Login via SSH keys only. This hardens security! +.. cfgcmd:: set service ssh fido pin-required + + Require FIDO2 keys to attest that a user has been verified (e.g. via a PIN). + +.. cfgcmd:: set service ssh fido touch-required + + Require FIDO2 keys to attest that a user is physically present. + .. cfgcmd:: set service ssh disable-host-validation Disable the host validation through reverse DNS lookups - can speedup login |