diff --git a/docs/cspell.json b/docs/cspell.json index 5e7bf94daceff..28a17ba71429e 100644 --- a/docs/cspell.json +++ b/docs/cspell.json @@ -113,6 +113,7 @@ "MAINPID", "MDAs", "MGET", + "Minidriver", "MYDNS", "MYELB", "MYIP", diff --git a/docs/pages/access-controls/guides/hardware-key-support.mdx b/docs/pages/access-controls/guides/hardware-key-support.mdx index 43ca1c718b527..8e791cc0d1fc1 100644 --- a/docs/pages/access-controls/guides/hardware-key-support.mdx +++ b/docs/pages/access-controls/guides/hardware-key-support.mdx @@ -77,6 +77,10 @@ like `tctl edit`. With touch required, hardware key support provides better secu so we recommend only using one PIV application at a time. +- Install a smart card driver for you operating system. Teleport clients will connect to your YubiKey through the smart card driver to generate keys and perform cryptographic operations. + - MacOS and Windows both ship with smart card drivers. + - If you run into problems on Windows, try the official [YubiKey Smart Card Minidriver](https://www.yubico.com/support/download/smart-card-drivers-tools/). + - On Linux distributions, download the [YubiKey Manager or Yubico PIV tool](https://www.yubico.com/support/download/smart-card-drivers-tools/), which both include the Linux smart card driver as a dependency. - (!docs/pages/includes/tctl.mdx!) ## Step 1/2. Enforce hardware key support