Skip to main content

Software prerequisites

Although patches were submitted years ago, smart card support in OpenSSH is very recent:

Only OpenSSH version 5.4p1 supports smartcard using PKCS#11 authentication. Furthermore, there is a bug in OpenSSH v5.4p1 release preventing ssh from reading pkcs#11 config in /etc/ssh/ssh_config. Although this is a minor bug, this proves to be tedious.

Therefore we recommand using OpenSSH 5.5p1.

To check OpenSSH version on your computer, running client:

$ ssh -v
OpenSSH_5.4p1, OpenSSL 0.9.8m 25 Feb 2010

In this example, we are running OpenSSH 5.4p1.
You should upgrade to OpenSSH 5.5p1.

In the tutorial, you will learn how to upgrade OpenSSH.