[{"data":1,"prerenderedAt":104},["ShallowReactive",2],{"i-heroicons:building-office-2":3,"i-heroicons:computer-desktop":8,"i-heroicons:cloud":10,"i-heroicons:server":12,"i-heroicons:folder":14,"i-heroicons:chart-bar":16,"i-heroicons:lock-closed":18,"i-heroicons:rectangle-stack":20,"i-heroicons:scale":22,"i-heroicons:key":24,"i-heroicons:finger-print":26,"i-heroicons:cpu-chip":28,"i-heroicons:document-text":30,"i-heroicons:shield-exclamation":32,"i-heroicons:shield-check":34,"blog-en-manage-ssh-private-keys-windows-yubikey":36,"i-heroicons:user":102},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 21h19.5m-18-18v18m10.5-18v18m6-13.5V21M6.75 6.75h.75m-.75 3h.75m-.75 3h.75m3-6h.75m-.75 3h.75m-.75 3h.75M6.75 21v-3.375c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125V21M3 3h12m-.75 4.5H21m-3.75 3.75h.008v.008h-.008zm0 3h.008v.008h-.008zm0 3h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 17.25v1.007a3 3 0 0 1-.879 2.122L7.5 21h9l-.621-.621A3 3 0 0 1 15 18.257V17.25m6-12V15a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 15V5.25m18 0A2.25 2.25 0 0 0 18.75 3H5.25A2.25 2.25 0 0 0 3 5.25m18 0V12a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 12V5.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 15a4.5 4.5 0 0 0 4.5 4.5H18a3.75 3.75 0 0 0 1.332-7.257a3 3 0 0 0-3.758-3.848a5.25 5.25 0 0 0-10.233 2.33A4.5 4.5 0 0 0 2.25 15\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M21.75 17.25v-.228a4.5 4.5 0 0 0-.12-1.03l-2.268-9.64a3.375 3.375 0 0 0-3.285-2.602H7.923a3.375 3.375 0 0 0-3.285 2.602l-2.268 9.64a4.5 4.5 0 0 0-.12 1.03v.228m19.5 0a3 3 0 0 1-3 3H5.25a3 3 0 0 1-3-3m19.5 0a3 3 0 0 0-3-3H5.25a3 3 0 0 0-3 3m16.5 0h.008v.008h-.008zm-3 0h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 12.75V12A2.25 2.25 0 0 1 4.5 9.75h15A2.25 2.25 0 0 1 21.75 12v.75m-8.69-6.44l-2.12-2.12a1.5 1.5 0 0 0-1.061-.44H4.5A2.25 2.25 0 0 0 2.25 6v12a2.25 2.25 0 0 0 2.25 2.25h15A2.25 2.25 0 0 0 21.75 18V9a2.25 2.25 0 0 0-2.25-2.25h-5.379a1.5 1.5 0 0 1-1.06-.44\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 0 1 3 19.875zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M16.5 10.5V6.75a4.5 4.5 0 1 0-9 0v3.75m-.75 11.25h10.5a2.25 2.25 0 0 0 2.25-2.25v-6.75a2.25 2.25 0 0 0-2.25-2.25H6.75a2.25 2.25 0 0 0-2.25 2.25v6.75a2.25 2.25 0 0 0 2.25 2.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M6 6.878V6a2.25 2.25 0 0 1 2.25-2.25h7.5A2.25 2.25 0 0 1 18 6v.878m-12 0q.354-.126.75-.128h10.5q.396.002.75.128m-12 0A2.25 2.25 0 0 0 4.5 9v.878m13.5-3A2.25 2.25 0 0 1 19.5 9v.878m0 0a2.3 2.3 0 0 0-.75-.128H5.25q-.396.002-.75.128m15 0A2.25 2.25 0 0 1 21 12v6a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 18v-6c0-.98.626-1.813 1.5-2.122\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":23},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 3v17.25m0 0c-1.472 0-2.882.265-4.185.75M12 20.25c1.472 0 2.882.265 4.185.75M18.75 4.97A48 48 0 0 0 12 4.5c-2.291 0-4.545.16-6.75.47m13.5 0q1.515.215 3 .52m-3-.52l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202zm-16.5.52q1.485-.305 3-.52m0 0l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":25},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 5.25a3 3 0 0 1 3 3m3 0a6 6 0 0 1-7.029 5.912c-.563-.097-1.159.026-1.563.43L10.5 17.25H8.25v2.25H6v2.25H2.25v-2.818c0-.597.237-1.17.659-1.591l6.499-6.499c.404-.404.527-1 .43-1.563A6 6 0 1 1 21.75 8.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":27},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M7.864 4.243A7.5 7.5 0 0 1 19.5 10.5c0 2.92-.556 5.709-1.568 8.269M5.742 6.364A7.47 7.47 0 0 0 4.5 10.5a7.46 7.46 0 0 1-1.15 3.993m1.989 3.559A11.2 11.2 0 0 0 8.25 10.5a3.75 3.75 0 1 1 7.5 0q0 .79-.064 1.565M12 10.5a14.94 14.94 0 0 1-3.6 9.75m6.633-4.596a18.7 18.7 0 0 1-2.485 5.33\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":29},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M8.25 3v1.5M4.5 8.25H3m18 0h-1.5M4.5 12H3m18 0h-1.5m-15 3.75H3m18 0h-1.5M8.25 19.5V21M12 3v1.5m0 15V21m3.75-18v1.5m0 15V21m-9-1.5h10.5a2.25 2.25 0 0 0 2.25-2.25V6.75a2.25 2.25 0 0 0-2.25-2.25H6.75A2.25 2.25 0 0 0 4.5 6.75v10.5a2.25 2.25 0 0 0 2.25 2.25m.75-12h9v9h-9z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M19.5 14.25v-2.625a3.375 3.375 0 0 0-3.375-3.375h-1.5A1.125 1.125 0 0 1 13.5 7.125v-1.5a3.375 3.375 0 0 0-3.375-3.375H8.25m0 12.75h7.5m-7.5 3H12M10.5 2.25H5.625c-.621 0-1.125.504-1.125 1.125v17.25c0 .621.504 1.125 1.125 1.125h12.75c.621 0 1.125-.504 1.125-1.125V11.25a9 9 0 0 0-9-9\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 9v3.75m0-10.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.75c0 5.592 3.824 10.29 9 11.622c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.57-.598-3.75h-.152c-3.196 0-6.1-1.25-8.25-3.286m0 13.036h.008v.008H12z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 12.75L11.25 15L15 9.75m-3-7.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.749c0 5.592 3.824 10.29 9 11.623c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.571-.598-3.751h-.152c-3.196 0-6.1-1.248-8.25-3.285\"\u002F>",{"id":37,"documentId":38,"title":39,"content":40,"slug":41,"published":42,"createdAt":43,"updatedAt":43,"publishedAt":44,"locale":45,"authorManual":46,"cover":47,"tags":98,"seo":99,"author":51},63,"papgbdmf1vsz1kr3ramc2203","Managing SSH Private Keys for Windows with YubiKey","\u003Cp>SSH private keys are usually managed by storing them on PCs and using them for server connections. However, suppose one store their SSH private key in YubiKey and inserts this YubiKey into their PC when connecting to the SSH. In that case, the need for storing private keys in various PCs is eliminated, especially since the private key is stored safely on the YubiKey device.\u003C\u002Fp>\n\u003Cp>This article will delve deeper into this process, explaining how to store an existing private key on the YubiKey and make an SSH connection.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Environment\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>・OS： Windows 10 ver1809\u003C\u002Fp>\n\u003Cp>・YubiKey 4 (YubiKey 4 or 5 series is available)\u003C\u002Fp>\n\u003Cp>・Yubico PIV Manager\u003C\u002Fp>\n\u003Cp>・Putty CAC 0.71\u003C\u002Fp>\n\u003Cp>・CentOS 7\n　　The key is generated with RSA 2048bit, and SSH public key authentication is set up.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Disclaimer\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>We are not responsible for any problems that may occur due to the use of the listed information.\u003C\u002Fp>\n\u003Cp>By overwriting the credentials of YubiKey, the credentials currently used may be deleted and may no longer be able to be used.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Key Conversion\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>※Please skip this section if the PEM format is already being used.\u003C\u002Fp>\n\u003Cp>First, convert the existing private key to PEM format.\u003C\u002Fp>\n\u003Cp>If a key is generated using OpenSSH 7.8 or later with ssh-keygen, it is likely to be developed in a proprietary format, so convert it to PEM format. \u003Ca href=\"https:\u002F\u002Fwww.openssh.com\u002Freleasenotes.html\">※OpenSSH: Release Notes\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Enter the following command to convert the key to PEM format.\u003C\u002Fp>\n\u003Cp>※This command overwrites the existing private key, so please make a backup before executing it.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>ssh-keygen -p -f id_rsa -m pem\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This generates a public key from the converted private key.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>openssl rsa -in id_rsa -pubout > id_rsa_pub.pem\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Configuration of YubiKey 4\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Now, configure the YubiKey to store the private key. \u003Ca href=\"https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002Fservices-software\u002Fdownload\u002Fsmart-card-drivers-tools\u002F\">Download\u003C\u002Fa> YubiKey PIV Manager and Yubico PIV Tool used for configuration.\u003C\u002Fp>\n\u003Cp>※The complete set of tools can be installed in the Windows environment using Scoop.\u003C\u002Fp>\n\u003Cp>Please refer to the summary of Tools for Developers - What is YubiKey (Part 3).\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Unzip yubico-piv-tool-1.6.2-win64.zip and deploy it directly under the C drive.\u003C\u002Fp>\n\u003Cp>Then, pass the path to C:¥yubico-piv-tool-1.6.2-win64¥bin.\u003C\u002Fp>\n\u003Cp>Next, run yubikey-piv-manager-1.4.2g-win.exe and install.\u003C\u002Fp>\n\u003Cp>The application will start automatically after installation—plug in the YubiKey.\u003C\u002Fp>\n\u003Cp>Set the PIN code.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_2_3713db4ece.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Use PIN Code to Access YubiKey's Credential Information\u003C\u002Fp>\n\u003Cp>Next, select "Use a separate key."\u003C\u002Fp>\n\u003Cp>※If nothing is displayed, press the "Randomize" button to generate it.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_3_abed7bc0f2.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>All PIV management operations in YubiKey require a 24-byte 3DES key called a Management Key.\u003C\u002Fp>\n\u003Cp>**※**The Management Key is for later use, so please copy and paste it into an editor.\u003C\u002Fp>\n\u003Cp>Finally, set up the PUK.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_4_e192b79487.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>PUK is a code used to reset the PIN when the PIN has been locked.\u003C\u002Fp>\n\u003Cp>This concludes the YubiKey PIV Manager operation.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Storing a Private Key in YubiKey\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>YubiKey has four certificate storage areas.\u003C\u002Fp>\n\u003Cp>・9a — PIV Authentication\u003C\u002Fp>\n\u003Cp>・9c — Digital Signature\u003C\u002Fp>\n\u003Cp>・9d — Key Management\u003C\u002Fp>\n\u003Cp>・9e — Card Authentication\u003C\u002Fp>\n\u003Cp>This example will use the "9a" slot.\u003C\u002Fp>\n\u003Cp>From here, the CUI tool will be used.\u003C\u002Fp>\n\u003Cp>Execute the following command at the command prompt to store the private key in the 9a slot.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>yubico-piv-tool -a import-key -s 9a -i id_rsa -K PEM -k(management key)\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>※Please enter the management key without a space after "-k."\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Storing a Self-Signed Certificate for the Public Key\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Self-sign the public key that is the counterpart of the SSH private key to create a self-signed certificate and store it inside YubiKey.\u003C\u002Fp>\n\u003Cp>First, create a self-signed certificate.\u003C\u002Fp>\n\u003Cp>※Please execute the following command with the private key stored in slot 9a.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>yubico-piv-tool -a verify-pin -a selfsign-certificate -s 9a -S "\u002FCN=host.example.com\u002FOU=test\u002FO=example.com\u002F" -i id_rsa_pub.pem -o 9a-cert.pem --valid-days=(number of days)\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This operation requires the entry of a PIN code.\u003C\u002Fp>\n\u003Cp>-S: x.509 is the certificate description. The name written on the CN will be displayed on the OS certificate selection screen.\u003C\u002Fp>\n\u003Cp>–Valid-days: Represents the expiration date of the certificate, which is set to 365 days by default if not specified.\u003C\u002Fp>\n\u003Cp>Next, this certificate is stored in YubiKey.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>yubico-piv-tool -a import-certificate -s 9a -i 9a-cert.pem -K PEM -k(Management Key)\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Check the settings.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>yubico-piv-tool -a status\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_5_cbd4a95304.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Make sure it is stored in the 9a slot.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>SSH Connection Using YubiKey\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>The SSH connection is set using Putty-CAC, which can be downloaded \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FNoMoreFood\u002Fputty-cac\u002Freleases\">here.\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>※In this article, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FNoMoreFood\u002Fputty-cac\u002Fraw\u002F0.71\u002Fbinaries\u002Fputtycac-64bit-0.71-installer.msi\">puttycac-64bit-0.71-installer.msi\u003C\u002Fa> is installed.\u003C\u002Fp>\n\u003Cp>Now, set up an SSH connection using YubiKey.\u003C\u002Fp>\n\u003Cp>Insert the YubiKey into the USB port and start Putty.\u003C\u002Fp>\n\u003Cp>Go to Category > Connection > SSH > Certificate to configure the certificate settings.\u003C\u002Fp>\n\u003Cp>Check "Attempt certificate authentication" and press "Set CAPI Cert...".\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_6_de54619773.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>When the certificate selection screen appears, select the certificate which was just created.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_7_b4d8062042.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>The connection setup is now complete.\u003C\u002Fp>\n\u003Cp>Now, try SSH connection using YubiKey right away.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_8_c8f1fc0649.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>After entering the user name, one will be asked for a PIN.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_9_46930e1dcb.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Enter the PIN.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_10_3491b002a1.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>While logging in is possible through this method, it can be optimized to bypass the certificate selection every time a connection is made by setting up Putty Pageant.\u003C\u002Fp>\n\u003Cp>Putty Pageant is included in the Putty installer. If installed with default settings, it can be found in pageant.exe in "C:＼Program Files\\PuTTY."\u003C\u002Fp>\n\u003Cp>Run pageant.exe.\u003C\u002Fp>\n\u003Cp>After execution, the Pageant will appear in the taskbar.\u003C\u002Fp>\n\u003Cp>Right-click pageant and select "Add CAPI Cert."\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_11_d9f82cd1f8.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Add a certificate.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_7_b4d8062042.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Once configured, one can connect without selecting a certificate the next time they access the site.\u003C\u002Fp>\n\u003Cp>If a connection point is registered with Putty, one can log in by going to Saved Sessions > Select a connection point > Enter account > Enter PIN.\u003C\u002Fp>\n\u003Cp>Tera Term can also be used by setting up pageant.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Conclusion\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>This article introduced setting SSH connections using YubiKey to allow users to perform operations without storing their private keys in multiple terminals. The following article will cover a similar process for the macOS.\u003C\u002Fp>\n","manage-ssh-private-keys-windows-yubikey","2019-03-06","2026-04-28T06:44:46.605Z","2026-04-28T06:44:49.150Z","en","YubiOn",{"id":48,"documentId":49,"name":50,"alternativeText":51,"caption":51,"focalPoint":51,"width":52,"height":53,"formats":54,"hash":93,"ext":56,"mime":60,"size":94,"url":95,"previewUrl":51,"provider":96,"provider_metadata":51,"createdAt":97,"updatedAt":97,"publishedAt":97},607,"trit34rqa0c3ngt8s3zwhmru","blog-manage-ssh-private-keys-windows-yubikey-1.png",null,1478,618,{"large":55,"small":66,"medium":75,"thumbnail":84},{"ext":56,"url":57,"etag":58,"hash":59,"mime":60,"name":61,"path":51,"size":62,"width":63,"height":64,"sizeInBytes":65},".png","https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Flarge_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f.png","ed8955ccf9dc43f0cecb6439a5ba10ee","large_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f","image\u002Fpng","large_blog-manage-ssh-private-keys-windows-yubikey-1.png",123.81,1000,418,123805,{"ext":56,"url":67,"etag":68,"hash":69,"mime":60,"name":70,"path":51,"size":71,"width":72,"height":73,"sizeInBytes":74},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fsmall_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f.png","2c15f24ad7bf72bc23da0907ecdb48fa","small_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f","small_blog-manage-ssh-private-keys-windows-yubikey-1.png",45.33,500,209,45328,{"ext":56,"url":76,"etag":77,"hash":78,"mime":60,"name":79,"path":51,"size":80,"width":81,"height":82,"sizeInBytes":83},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fmedium_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f.png","23c6da4b1d68d6263c7df50f57d7a7f1","medium_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f","medium_blog-manage-ssh-private-keys-windows-yubikey-1.png",81.79,750,314,81786,{"ext":56,"url":85,"etag":86,"hash":87,"mime":60,"name":88,"path":51,"size":89,"width":90,"height":91,"sizeInBytes":92},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fthumbnail_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f.png","95aafff850dce44279a7fcc1a18a6a18","thumbnail_blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f","thumbnail_blog-manage-ssh-private-keys-windows-yubikey-1.png",14.36,245,102,14356,"blog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f",31.53,"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_manage_ssh_private_keys_windows_yubikey_1_8080b3ef3f.png","aws-s3","2026-04-28T06:44:03.930Z",[],{"id":100,"metaDescription":101},297,"Learn how to store your SSH private key on a YubiKey for secure server connections on Windows, enhancing your security.",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":103},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 6a3.75 3.75 0 1 1-7.5 0a3.75 3.75 0 0 1 7.5 0M4.501 20.118a7.5 7.5 0 0 1 14.998 0A17.9 17.9 0 0 1 12 21.75c-2.676 0-5.216-.584-7.499-1.632\"\u002F>",1783406263724]