diff options
| author | Robert-L-Turner <37597024+Robert-L-Turner@users.noreply.github.com> | 2021-11-22 19:43:44 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-11-22 11:43:44 +0000 |
| commit | 6d5ea0f127e60ca6c7ecc83eff4618111b7c831b (patch) | |
| tree | fca6d74503ffe6b4202bf86676ea1fa45479375c /man/homectl.xml | |
| parent | f910926715ce7c61e143f4b0774592873a48a85a (diff) | |
| download | systemd-6d5ea0f127e60ca6c7ecc83eff4618111b7c831b.tar.gz | |
FIDO2 device removal instructions (#21426)
* man: document FIDO2 device removal
Indicate to users how to remove FIDO2 device in the --fido2-device=path section by setting path to an empty string (""). Tested on systemd 249 (249.6-3-arch)
Diffstat (limited to 'man/homectl.xml')
| -rw-r--r-- | man/homectl.xml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/man/homectl.xml b/man/homectl.xml index 6ed8e90bf1..89af3d77c7 100644 --- a/man/homectl.xml +++ b/man/homectl.xml @@ -376,6 +376,9 @@ <para>Note that FIDO2 devices suitable for this option must implement the <literal>hmac-secret</literal> extension. Most current devices (such as the YubiKey 5 series) do. If the extension is not implemented the device cannot be used for unlocking home directories.</para> + + <para>The FIDO2 device may be subsequently removed by setting the device path to an empty string + (e.g. <command>homectl update $USER --fido2-device=""</command>).</para> <para>Note that many hardware security tokens implement both FIDO2 and PKCS#11/PIV (and thus may be used with either <option>--fido2-device=</option> or <option>--pkcs11-token-uri=</option>), for a |