"Generating a new SSH key for a hardware security key" -> Neither prompt works...

[scottr99]

Select Topic Area

General

Body

I tried:
ssh-keygen -t ed25519-sk -C "[email protected]"
and:
ssh-keygen -t ecdsa-sk -C "[email protected]"

but for both commands I receive the following:

Generating public/private ecdsa-sk key pair.
You may need to touch your authenticator to authorize key generation.
No FIDO SecurityKeyProvider specified
Key enrollment failed: invalid format

Any help?

[scottr99]

The above is from the following page.

[scottr99]

Hello, and thank you for your reply.

I wish what you have provided would help me, but unfortunately, it doesn't.

My hardware is a 1 y/o Mac w/ latest OS, so that shouldn't be the issue.

My SSH Client is up to date, and SSH Config. is good.

[ebndev]

Hey @ljstein99, thanks for wanting to contribute to the community!

Please note: We’ve clarified our stance on using generative AI tools like ChatGPT within our Community via this announcement. Please review the guidelines to ensure your post meets them as failure to adhere to those rules can result in action taken by our moderator team.  You can read our updated Code of Conduct and the announcement for more details.

Thank you for helping us maintain an authentic and beneficial space for everyone.

[ZFPuhi]

In this case the -sk key types explicitly call for the presence of a hardware security key, but it doesn't sounds like you have added one.
Either add a FIDO2-compliant hardware key, or change the type argument to either ecdsa or ed25519 (without the -sk).

[scottr99]

Thank you.

[ebndev]

@ZFPuhi thank you for all of your contributions to the Community in the last week! Appreciate you helping folks and answering questions 😁