Loading…
This browser cannot use security keys
sshmint signs in with a hardware security key (WebAuthn) only. Open this page in a current browser over HTTPS.
No security key enrolled yet
On the server, as root, run
sudo sshmint enroll-token
and open the link it prints. The link works once and expires after 15 minutes.
Enroll a security key
Give the key a name you will recognise, then touch it when the browser asks.
Sign in
Touch your security key. There is no password.
A certificate request is waiting for your decision. Sign in to see it.
Requests waiting for you
Nothing is waiting. On the machine that needs access, run
sshmint login
The key is generated there and never leaves it. The request shows up here for your touch.
Active certificates
Sign a pasted public key
For a machine without the sshmint client: generate a key there (ssh-keygen -t ed25519), paste the .pub line here, and put the certificate next to the private key as <key>-cert.pub.
Security keys
Only one key is enrolled. If it is lost, signing in needs a root shell on this server. Enroll a spare.
Keys are managed from a root shell on the server, never from this page. To enroll another key:
sudo sshmint enroll-token
It prints a one-time link (15 minutes). Open it and touch the new key. Removing a key: the command under its name.