No SSH authentication forwarding using smartcard #20949

Closed
opened 2026-01-31 07:28:40 +00:00 by claunia · 3 comments
Owner

Originally created by @cmonty14 on GitHub (Dec 4, 2023).

Windows Terminal version

1.18.2822.0

Windows build number

11.0.22621.2715

Other Software

Gpg4win 4.2.0

Steps to reproduce

I connect a Nitrokey security-token (that is comparable to Yubikey) with OpenPGP keys to my client.
And I want to use this Nitrokey for SSH login to remote servers.

For this I installed GPG4Win on my client and configured file gpg-agent.conf:

enable-ssh-support
To Enable support for PuTTY
enable-putty-support
To Enable support for the native Microsoft OpenSSH binaries (requires gpg 2.4.0 / Gpg4win 4.1.0 or higher)
enable-win32-openssh-support
use-standard-socket
default-cache-ttl 600
max-cache-ttl 7200
Then I (re-) start the gpg-agent and try to SSH into the Jumphost using command ssh (in Windows PowerShell profile).
Here I get a popup window where I must enter the PIN previously set on Nitrokey.
After this I'm connected to the jumphost shell (Linux).

Now I want to connect to the target server using command ssh .

Expected Behavior

Public key authentication for SSH connection to any target server from jumphost (running Linux).

Actual Behavior

I need to enter (user) password requested by target server. This means no public key is available.

No, this issue is not related to https://github.com/PowerShell/Win32-OpenSSH/issues/1461 because I'm using Windows SSH client.

Originally created by @cmonty14 on GitHub (Dec 4, 2023). ### Windows Terminal version 1.18.2822.0 ### Windows build number 11.0.22621.2715 ### Other Software Gpg4win 4.2.0 ### Steps to reproduce I connect a Nitrokey security-token (that is comparable to Yubikey) with OpenPGP keys to my client. And I want to use this Nitrokey for SSH login to remote servers. For this I installed GPG4Win on my client and configured file gpg-agent.conf: enable-ssh-support To Enable support for PuTTY enable-putty-support To Enable support for the native Microsoft OpenSSH binaries (requires gpg 2.4.0 / Gpg4win 4.1.0 or higher) enable-win32-openssh-support use-standard-socket default-cache-ttl 600 max-cache-ttl 7200 Then I (re-) start the gpg-agent and try to SSH into the Jumphost using command ssh (in Windows PowerShell profile). Here I get a popup window where I must enter the PIN previously set on Nitrokey. After this I'm connected to the jumphost shell (Linux). Now I want to connect to the target server using command ssh . ### Expected Behavior Public key authentication for SSH connection to any target server from jumphost (running Linux). ### Actual Behavior I need to enter (user) password requested by target server. This means no public key is available. No, this issue is **not** related to https://github.com/PowerShell/Win32-OpenSSH/issues/1461 because I'm using Windows SSH client.
claunia added the Issue-BugResolution-Duplicate labels 2026-01-31 07:28:41 +00:00
Author
Owner

@zadjii-msft commented on GitHub (Dec 4, 2023):

Does this work in the vintage console (donhost.exe)/? I suspect it doesn't. I'd reckon that this is an issue either with your ssh client or server. https://github.com/PowerShell/Win32-OpenSSH is definitely the right place to go for issues with the built-in Windows ssh client

@zadjii-msft commented on GitHub (Dec 4, 2023): Does this work in the vintage console (`donhost.exe`)/? I suspect it doesn't. I'd reckon that this is an issue either with your ssh client or server. https://github.com/PowerShell/Win32-OpenSSH is definitely the right place to go for issues with the built-in Windows ssh client
Author
Owner

@zadjii-msft commented on GitHub (Dec 4, 2023):

Ah you know what? I see you already filed a thread about this over in /dup #16406. No need to file a second thread about this! That'll just confuse everyone and further muddle the discussion. Better if you follow up in the original thread you filed.

Thanks!

@zadjii-msft commented on GitHub (Dec 4, 2023): Ah you know what? I see you already filed a thread about this over in /dup #16406. No need to file a second thread about this! That'll just confuse everyone and further muddle the discussion. Better if you follow up in the original thread you filed. Thanks!
Author
Owner

@microsoft-github-policy-service[bot] commented on GitHub (Dec 4, 2023):

Hi! We've identified this issue as a duplicate of another one that already exists on this Issue Tracker. This specific instance is being closed in favor of tracking the concern over on the referenced thread. Thanks for your report!

@microsoft-github-policy-service[bot] commented on GitHub (Dec 4, 2023): Hi! We've identified this issue as a duplicate of another one that already exists on this Issue Tracker. This specific instance is being closed in favor of tracking the concern over on the referenced thread. Thanks for your report! <!-- Policy app identification https://img.shields.io/static/v1?label=PullRequestIssueManagement. -->
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#20949