From 924c2163ba9254d6109837c09c796b852595ad10 Mon Sep 17 00:00:00 2001 From: joerger Date: Mon, 9 Oct 2023 16:55:55 -0700 Subject: [PATCH 1/3] Add pcscd install instructions for hardware key support. --- docs/pages/access-controls/guides/hardware-key-support.mdx | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/pages/access-controls/guides/hardware-key-support.mdx b/docs/pages/access-controls/guides/hardware-key-support.mdx index 2760738cd163d..38895c9dac537 100644 --- a/docs/pages/access-controls/guides/hardware-key-support.mdx +++ b/docs/pages/access-controls/guides/hardware-key-support.mdx @@ -77,6 +77,9 @@ like `tctl edit`. With touch required, hardware key support provides better secu so we recommend only using one PIV application at a time. +- Running Smart Card daemon: + - Ships with MacOS and Windows. + - On Linux, consult your distribution manual on how to install `pcscd`. - (!docs/pages/includes/tctl.mdx!) ## Step 1/2. Enforce hardware key support From f0c50c46573e2745ff2719f52799a136bf600b9c Mon Sep 17 00:00:00 2001 From: joerger Date: Wed, 11 Oct 2023 18:12:17 -0700 Subject: [PATCH 2/3] Expand smart card driver information. --- docs/pages/access-controls/guides/hardware-key-support.mdx | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/pages/access-controls/guides/hardware-key-support.mdx b/docs/pages/access-controls/guides/hardware-key-support.mdx index 38895c9dac537..d6df22861b66e 100644 --- a/docs/pages/access-controls/guides/hardware-key-support.mdx +++ b/docs/pages/access-controls/guides/hardware-key-support.mdx @@ -77,9 +77,10 @@ like `tctl edit`. With touch required, hardware key support provides better secu so we recommend only using one PIV application at a time. -- Running Smart Card daemon: - - Ships with MacOS and Windows. - - On Linux, consult your distribution manual on how to install `pcscd`. +- Install a smart card driver for you operating system. Teleport clients will connect to your YubiKey through the smart card driver to generate keys and perform cryptographical operations. + - MacOS and Windows both ship with smart card drivers. + - If you run into problems on Windows, try the official [YubiKey Smart Card Minidriver](https://www.yubico.com/support/download/smart-card-drivers-tools/). + - On Linux distributions, download the [YubiKey Manager or Yubico PIV tool](https://www.yubico.com/support/download/smart-card-drivers-tools/), which both include the Linux smart card driver as a dependency. - (!docs/pages/includes/tctl.mdx!) ## Step 1/2. Enforce hardware key support From 537272a43978ea64c3e474b761f0147402c4ea0d Mon Sep 17 00:00:00 2001 From: joerger Date: Thu, 12 Oct 2023 10:24:10 -0700 Subject: [PATCH 3/3] Fix typo and spell check. --- docs/cspell.json | 1 + docs/pages/access-controls/guides/hardware-key-support.mdx | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/cspell.json b/docs/cspell.json index 7617d96c73574..19b3a41797197 100644 --- a/docs/cspell.json +++ b/docs/cspell.json @@ -114,6 +114,7 @@ "MAINPID", "MDAs", "MGET", + "Minidriver", "MYDNS", "MYELB", "MYIP", diff --git a/docs/pages/access-controls/guides/hardware-key-support.mdx b/docs/pages/access-controls/guides/hardware-key-support.mdx index d6df22861b66e..3a233c3e619e5 100644 --- a/docs/pages/access-controls/guides/hardware-key-support.mdx +++ b/docs/pages/access-controls/guides/hardware-key-support.mdx @@ -77,7 +77,7 @@ like `tctl edit`. With touch required, hardware key support provides better secu so we recommend only using one PIV application at a time. -- Install a smart card driver for you operating system. Teleport clients will connect to your YubiKey through the smart card driver to generate keys and perform cryptographical operations. +- Install a smart card driver for you operating system. Teleport clients will connect to your YubiKey through the smart card driver to generate keys and perform cryptographic operations. - MacOS and Windows both ship with smart card drivers. - If you run into problems on Windows, try the official [YubiKey Smart Card Minidriver](https://www.yubico.com/support/download/smart-card-drivers-tools/). - On Linux distributions, download the [YubiKey Manager or Yubico PIV tool](https://www.yubico.com/support/download/smart-card-drivers-tools/), which both include the Linux smart card driver as a dependency.