Skip to content

Instantly share code, notes, and snippets.

@yonixw
Created December 4, 2025 22:22
Show Gist options
  • Select an option

  • Save yonixw/d64440425fee4f876ba4b96a5b5821a7 to your computer and use it in GitHub Desktop.

Select an option

Save yonixw/d64440425fee4f876ba4b96a5b5821a7 to your computer and use it in GitHub Desktop.
YubiKey SSH GIT

git_ssh_push_yubikey_HOWTO.txt

from:
    https://docs.publishing.service.gov.uk/manual/setup-a-yubikey.html#configuring-ssh-to-use-the-yubikey

ssh-keygen -t ed25519-sk -O resident -O verify-required -C "Yoni Was <yoni@privacy-rating.com>"

-O application=ssh:custom_name 
    overrides the FIDO2 application name so you can store more than one SSH key on the device. 
    The default is just `ssh:`
    
this private key is a pointer to the credentials on the Security Key
    (the passphrase would be redundant)
    
->C:\Users\Yoni\.ssh\gitlab_yubikey_id_ed25519_sk(.pub)
    
In C:\Users\Yoni\.ssh\config
========
Host gitlab.com
    HostName gitlab.com
    User git
    IdentityFile C:\Users\Yoni\.ssh\gitlab_yubikey_id_ed25519_sk
========
  
Power shell
    # Have ssh agent start automatically
    Get-Service ssh-agent | Set-Service -StartupType Automatic
    # Start ssh agent now
    Start-Service ssh-agent
    # Should work successfully
    Get-Service ssh-agent
    
C:\Windows\System32\OpenSSH>ssh -V
OpenSSH_for_Windows_9.5p1, LibreSSL 3.8.2

git config --global core.sshCommand "'C:\Windows\System32\OpenSSH\ssh.exe'"

ssh-add "C:\Users\Yoni\.ssh\gitlab_yubikey_id_ed25519_sk" 

git push
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment