FIDO2 -- only for Linux?

[Alex Mondale]

I sure hope there's something on the roadmap to allow FIDO2 devices like Yubikey to find hardware and OpenSSH (>8.2) support natively in Windows 10, 11 and WSL2. So far it looks to be missing in all 3, and GIT BASH also won't use my Yubikey 5 NFC device to authenticate to GitHub/Lab, Windows, or AzureAD (non-premium). Anyone have a workaround?

[#2]

Hello @Alex Mondale. This is indeed a shortcoming, and seems to depend on adding integration with Windows Hello API into the FIDO2 support used within OpenSSH. Some work was already done on this by various people, one example is OpenSSH SK WinHello. I seem to recall reading somewhere that this is something that is actively being worked on, but can't find the link right now.