1
sudo dnf install tpm2-pkcs11 tpm2-pkcs11-tools -y
2
sudo usermod -a -G tss "$(id -nu)"
3
newgrp tss

1
unset HISTFILE
2
tpm2_ptool init
3
tpm2_ptool init
4
tpm2_ptool addtoken --pid=1 --label=ssh --userpin=MySecretPassword --sopin=MyRecoveryPassword
5
tpm2_ptool addkey --label=ssh --userpin=MySecretPassword --algorithm=ecc256

1
ssh-keygen -D /usr/lib64/pkcs11/libtpm2_pkcs11.so > ~/.ssh/my-ssh-key_using-tpm2.pub
2
cat > ~/.ssh/config << EOF
3
Host server
4
    PKCS11Provider /usr/lib64/pkcs11/libtpm2_pkcs11.so
5
    PasswordAuthentication no
6
EOF

1
cat ~/.ssh/my-ssh-key_using-tpm2.pub | ssh -i ~/.ssh/my-identity-key user@server "cat >> ~/.ssh/authorized_keys"