> I can't find any OpenSSH documentation of either (server-side) PCKS#11/HSM support OpenSSHd talks to an ssh-agent that then talks to the HSM: > Identifies t

> I can't find any OpenSSH documentation of either (server-side) PCKS#11/HSM support OpenSSHd talks to an ssh-agent that then talks to the HSM: > Identifies the UNIX-domain socket used to communicate with an agent that has access to the private host keys. If the string "SSH_AUTH_SOCK" is specified, the location of the socket will be read from the SSH_AUTH_SOCK environment variable. * https://man.openbsd.org/sshd_config#HostKeyAgent https://man.openbsd.org/sshd_config#HostKeyAgent