TOI Author

4.36.0F TPM-anchored keys are a security feature that allow a compatible EOS switch to use its trusted platform module (TPM, a dedicated hardware component of the switch’s CPU board, or of a modular switch’s supervisor) to configure and use cryptographic keys for certain operations.

This feature allows a compatible SSH client to authenticate to EOS via a FIDO2-anchored SSH key via the “sk-ssh-ed25519@openssh.com” or “sk-ecdsa-sha2-nistp256@openssh.com” key types. In OpenSSH this was introduced in version 8.2p1. This feature is not compatible with the Federal Information Processing Standards (FIPS)restrictions mode in EOS; if both are configured, this feature will take precedence.