yubikey/yubikey-ssh-pkcs11.md

OpenSC: https://github.com/OpenSC/OpenSC

ssh-keygen -D /Library/OpenSC/lib/opensc-pkcs11.so
ssh -I /Library/OpenSC/lib/opensc-pkcs11.so root@example.com

alias ssh-keygeni='ssh-keygen -D /Library/OpenSC/lib/opensc-pkcs11.so'
alias sshi='ssh -I /Library/OpenSC/lib/opensc-pkcs11.so'
alias sshif='ssh -o "ForwardAgent yes" -I /Library/OpenSC/lib/opensc-pkcs11.so'
alias scpi='scp -o "PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so"'

~/.ssh/config

PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so

Reference

1. https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/SSH.md
2. https://github.com/ThomasHabets/simple-tpm-pk11
3. https://ubuntu.com/server/docs/smart-card-authentication-with-ssh