yubikey-agent(1)

yubikey-agent1

A seamless ssh-agent for yubikeys

Configuration

To start yubikey-agent automatically, enable its service using:

systemctl --user enable yubikey-service.user

To start yubikey-agent once, start its service using:

systemctl --user start yubikey-service.user

You must also set the $SSH_AUTH_SOCK variable to "$XDG_RUNTIME_DIR/yubikey-agent/yubikey-agent.sock".
In bash, this can be done by running the following command before your first use of yubikey-agent:

echo 'export SSH_AUTH_SOCK="$XDG_RUNTIME_DIR/yubikey-agent/yubikey-agent.sock"' >> ~/.bashrc

Overview

yubikey-agent [options] command [arguments]

Options

-setup

Generate a new SSH key on the attached YubiKey.

-l PATH

Run the agent, listening on the UNIX socket at PATH.

Releases

Unchanged in 2 releases since Debian 12 (Bookworm).

  1. 12–13

From yubikey-agent 0.1.4-2+b19 in Debian 13 (Trixie). Parsed by carta from the page's man source.