Simplest way to store private SSH (RSA) Keys on NK3?

[ideasman42]

Update: this worked for me:

Nitrokey Pro 2 - PKCS#11 key generation with Java and OpenSC

Hey @Vlasonag pkcs11-tool uses a keysize of 1024 by default, and the Pro does only support 2048 for generation, as you can see in pkcs11-tool -M: (edit: the Nitrokey Pro actually does, but recent OpenSC versions limit it to keysizes) ... RSA-PKCS-KEY-PAIR-GEN, keySize={2048,2048}, generate_key_pair ... so you’ll have to pass the proper keysize as --key-type RSA:2048, for me the key generation works with the following command line: $ pkcs11-tool --login-type so --pin 12345678 --so-pin 123456…

pkcs11-tool --login-type so --pin 12345678 --so-pin 12345678 -k --key-type RSA:2048 --slot 0

Although I’m still not sure how to access the generated keys via SSH.