Page MenuHomeVyOS Platform
Create Task
Maniphest T7483

SSH FIDO2 Support
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Summary

SSH FIDO2 Support

https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.html

Use case

Support FIDO2 verification for SSH authentication.

Additional information

Supporting SSH FIDO2 requires the following to be set on the SSH server. This option isn't currently exposed via the VyOS CLI.

"PubkeyAuthOptions verify-required"

OpenSSH 8.3 or newer is required to support this.

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)
Forum thread
https://forum.vyos.io/t/ssh-fido2-support/16607

Related Objects

Event Timeline

phillipmcmahon created this task.May 24 2025, 10:45 PM
Viacheslav triaged this task as Normal priority.May 24 2025, 10:46 PM
pasik subscribed.May 25 2025, 11:41 AM
phillipmcmahon updated the task description. (Show Details)May 28 2025, 6:28 AM
scj643 subscribed.Nov 17 2025, 4:37 PM

I will add this along with touch-required

scj643 added a comment.Nov 17 2025, 5:04 PM

https://github.com/vyos/vyos-1x/pull/4852 is ready. I just need to add to the documentation.

scj643 added a comment.Nov 17 2025, 5:14 PM

Documentation PR has been created https://github.com/vyos/vyos-documentation/pull/1708

Viacheslav changed the task status from Open to In progress.Nov 17 2025, 11:03 PM
Viacheslav assigned this task to scj643.
Restricted Repository Identity mentioned this in rVYOSONEX0868f3dc7246: Merge pull request #4852 from scj643/ssh-fido2-options.Jan 17 2026, 8:54 AM
c-po mentioned this in rVYOSONEX2473e1bfdeeb: ssh: T7483: Add fido2 PubkeyAuthOptions.Jan 17 2026, 8:54 AM
c-po added a project: VyOS 1.5 Circinus.Jan 17 2026, 8:54 AM
c-po moved this task from Need Triage to Completed on the VyOS Rolling board.
dmbaturin edited projects, added VyOS 1.5 Circinus (2026.02); removed VyOS 1.5 Circinus.Feb 12 2026, 6:32 PM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
Viacheslav closed this task as Resolved.Feb 13 2026, 9:46 AM