Along with traditional private key files, Terminalski also natively supports PIV smart cards (ex. YubiKey); you can use it as an externally stored private key. The following summarizes how you can set it up for SSH 'publickey' user authentication.

For your information, a PIV smart card supports holding at least 4 private keys. Each key is used for different purposes, for example, 'Card Authentication (9E)' key is commonly used for entering buildings or opening doors (hence it does not require entering a PIN). You can access two of those keys, 'PIV Authentication (9A)' and 'Card Authentication (9E/PINLESS)', from Terminalski for SSH user authentication.

Check your PIV smart card

Before you can use your PIV smart card, you must make sure it is actually recognized by Windows and contains private keys or certificates. For example, YubiKey supports various security protocols (ex. FIDO2, U2F, PIV smart card, etc.) and you must make sure that you have enabled and properly configured its PIV smart card function; you should be able to find its companion tools for such managements (ex. Yubico Authenticator).

Add your PIV smart card for SSH 'publickey' user authentication

Once you have set up your PIV smart card as described in Step 1, you can use it like a traditional private key file for SSH 'publickey' user authentication. Hence, you simply need to copy the public key to Windows clipboard and paste it to ~/.ssh/authorized_keys file on your SSH server. The following post has more detailed information about setting up the SSH 'publickey' user authentication:

Setting up 'publickey' User Authentication

For copying the public keys on your PIV smart card to Windows clipboard, you can use 'Login Agent' or 'Private Keys' window in Terminalski.

  • Login Agent
  • Private Keys