diff --git a/docs/cspell.json b/docs/cspell.json index 7617d96c73574..19b3a41797197 100644 --- a/docs/cspell.json +++ b/docs/cspell.json @@ -114,6 +114,7 @@ "MAINPID", "MDAs", "MGET", + "Minidriver", "MYDNS", "MYELB", "MYIP", diff --git a/docs/pages/access-controls/guides/hardware-key-support.mdx b/docs/pages/access-controls/guides/hardware-key-support.mdx index 2760738cd163d..3a233c3e619e5 100644 --- a/docs/pages/access-controls/guides/hardware-key-support.mdx +++ b/docs/pages/access-controls/guides/hardware-key-support.mdx @@ -77,6 +77,10 @@ like `tctl edit`. With touch required, hardware key support provides better secu so we recommend only using one PIV application at a time. +- Install a smart card driver for you operating system. Teleport clients will connect to your YubiKey through the smart card driver to generate keys and perform cryptographic operations. + - MacOS and Windows both ship with smart card drivers. + - If you run into problems on Windows, try the official [YubiKey Smart Card Minidriver](https://www.yubico.com/support/download/smart-card-drivers-tools/). + - On Linux distributions, download the [YubiKey Manager or Yubico PIV tool](https://www.yubico.com/support/download/smart-card-drivers-tools/), which both include the Linux smart card driver as a dependency. - (!docs/pages/includes/tctl.mdx!) ## Step 1/2. Enforce hardware key support