The option is found in » » ' SSH Agent Forwarding'. You must enable SSH agent forwarding before starting a terminal session in WSL. So you don't have to manually run commands or select menus to use your YubiKey just plug it in and you're ready! When you enable the SSH agent forwarding in Token2Shell, Token2Shell automatically detects your YubiKey and adds its public keys for SSH user authentication. For example, if you are connecting to Server C from Server A by first connecting to Server B (You → Server A → Server B → Server C), you only need to add the paired public key for your private key on intermediate servers (Server A, B and C). SSH agent forwarding allows you to use locally stored private keys for user authentication on intermediate servers. STEP 2 Enable SSH Agent Forwarding in Token2Shell

You don't have to use an OpenSSH server if you prefer a different sever, just make sure it's properly supported in WSL with the 'publickey' user authentication and SSH agent forwarding.įor more information about installing an OpenSSH server on Ubuntu 18.04, please visit:

If you're using a different Linux distribution, please consult its manual for installing and configuring an SSH server. We'll be using Ubuntu 18.04 and an OpenSSH server for setting up our workflow.

The following describes the steps to accomplish this. However, since Token2Shell natively supports PIV smart cards such as YubiKey and SSH agent forwarding, you can use your YubiKey from WSL via Token2Shell.

So you cannot directly use your YubiKey for SSH public key authentication in WSL it doesn't matter which Linux distribution you use, they all have this limitation. Windows Subsystem for Linux (WSL) currently has very limited support for USB devices it only supports accessing storage and serial pass-through devices.

Yubikey linux