From 6cb2ba4c8dcb53430703fc10bc5d4d09e4b74df6 Mon Sep 17 00:00:00 2001 From: Chloe Surett Date: Sat, 17 Jan 2026 03:55:52 -0500 Subject: ssh: T7483: Document fido2 options (#1708) --- docs/configuration/service/ssh.rst | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'docs/configuration/service') diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst index 90a28a34..4bb5af95 100644 --- a/docs/configuration/service/ssh.rst +++ b/docs/configuration/service/ssh.rst @@ -60,6 +60,14 @@ Configuration Disable password based authentication. Login via SSH keys only. This hardens security! +.. cfgcmd:: set service ssh fido pin-required + + Require FIDO2 keys to attest that a user has been verified (e.g. via a PIN). + +.. cfgcmd:: set service ssh fido touch-required + + Require FIDO2 keys to attest that a user is physically present. + .. cfgcmd:: set service ssh disable-host-validation Disable the host validation through reverse DNS lookups - can speedup login -- cgit v1.2.3