Setting up escsa_sk keys for ssh with Yubico

I have a desktop and laptop setup using the same iso/version. I’ve confirmed openssh-server is installed (same version) along with libfido2 on both (again, same version).

After generating the key on my laptop with my yubico plugged in, I can successfully create an escsa_sk key pair. I do get prompted to touch the key during the key generation.

I’ve copied the .pub key to the authorized_keys on the desktop. When I try to ssh from the laptop to the desktop, I do not get prompted to touch the key and instead am prompted to enter a password.

My initial thought is that an auth type in PAM was not correct, but I haven’t found anything.

Have you reboot your desktop?

Of course.