3

I am carrying my SSH key in a NitroKey smartcard, meaning that in order to SSH into a remote server, I first have to plug in the NitroKey so the local computer can read the private key.

However, I am wondering if I need to keep the private key available (i.e. keep the NitroKey plugged in) even after I've already established an active session? Does SSH continuously check whether the SSH private key is present during an active session? Or does it only check when connecting, and never afterwards? (meaning that I can remove the NitroKey without risking the session being interrupted)

Mads Peter Rommedahl
  • 33
  • 3

1 Answers1

0

The physical USB key is only ever needed when the private key is needed, which is only when you make the initial connection to an SSH server, at least under normal circumstances.

Kusalananda
  • 320,670
  • 36
  • 633
  • 936