Howto: wsl2 / ssh / fido2

HOWTO: WSL2 / SSH / FIDO2

In order to use your Nitrokey on Windows there is surprisingly not too much to do. First you need to make the stick available on windows. To do that follow the instructions on https://docs.nitrokey.com/ . Then You will need to install OpenSSH a compiled version can be found on the following Microsoft github account: Releases · PowerShell/Win32-OpenSSH · GitHub. Finally add to your shell’s .profile something like:

export SSH_SK_HELPER="/mnt/c/Program Files/OpenSSH/ssh-sk-helper.exe"

Keys confirmed to work with this setup:

  • Nitrokey 3

Notes:

This guide assumes that you have valid openssh fido2 credentials on you nitrokey and matching key files with correct permissions in `~/.ssh/

If you have feedback that should be added here let me know.

source: Securing SSH with FIDO2