> OpenSC Official Repo: https://github.com/OpenSC/OpenSC <br>
> PKCS#11 libraries:
> - `/Library/OpenSC/lib/opensc-pkcs11.so`
> - `/usr/local/lib/libykcs11.dylib`

OpenSSH can work with PKCS#11:
```shell
ssh-keygen -D /Library/OpenSC/lib/opensc-pkcs11.so
ssh -I /Library/OpenSC/lib/opensc-pkcs11.so root@example.com
```

Config `~/.ssh/config` also works:

```plain
PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so
```

<br>

OpenSSH with PKCS#11 aliases:
```
alias ssh-keygeni='ssh-keygen -D /Library/OpenSC/lib/opensc-pkcs11.so'
alias sshi='ssh -I /Library/OpenSC/lib/opensc-pkcs11.so'
alias sshif='ssh -o "ForwardAgent yes" -I /Library/OpenSC/lib/opensc-pkcs11.so'
alias scpi='scp -o "PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so"'
```

<br>

# Reference
1. https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/SSH.md
1. https://github.com/ThomasHabets/simple-tpm-pk11
1. https://ubuntu.com/server/docs/smart-card-authentication-with-ssh