Yubikey

ioreg -p IOUSB | grep YubiKey

lsusb -v 2>/dev/null | grep -A2 Yubico | grep "bcdDevice" | awk '{print $2}'

ykman info
# -- Output Explained --
Device type: YubiKey 5C NFC
Serial number: xxxxxxxx
Firmware version: 5.x.x
Form factor: Keychain (USB-C)
Enabled USB interfaces: OTP, FIDO, CCID

Enabled USB interfaces: OTP, FIDO, CCID
# SSH-related:
# FIDO = used by OpenSSH security-key keys like ed25519-sk / ecdsa-sk
# CCID = used for smart-card modes like PIV/OpenPGP, which can also be used for SSH
# OTP = not SSH-related for normal OpenSSH key auth
 
NFC transport is enabled
# SSH-related only if using NFC with a compatible FIDO/OpenPGP/PIV workflow.
# For normal OpenSSH on terminal, USB is usually what matters.
 
Applications USB NFC
Yubico OTP Enabled Enabled
# Not SSH-related for normal OpenSSH key authentication.
 
FIDO U2F Enabled Enabled
# SSH-related.
# Used by security-key authentication family.
# Older FIDO/U2F layer, related to OpenSSH -sk support.
 
FIDO2 Enabled Enabled
# SSH-related.
# Most important for:
# ssh-keygen -t ed25519-sk <-- Take note of the -sk ending!
# ssh-keygen -t ecdsa-sk <-- Take note of the -sk ending!
# resident SSH keys
# discoverable SSH credentials
# hardware-backed SSH authentication
 
OATH Enabled Enabled
# Not SSH-related.
# Used for TOTP/HOTP authenticator codes.
 
PIV Enabled Enabled
# SSH-related, optional.
# Can be used as a smart card for SSH via PKCS#11 / certificates.
# Different from ed25519-sk FIDO2 SSH keys.
 
OpenPGP Enabled Enabled
# SSH-related, optional.
# Can be used for SSH through gpg-agent.
# Different from ed25519-sk FIDO2 SSH keys.
 
YubiHSM Auth Enabled Enabled
# Not SSH-related for normal OpenSSH.
# Used for authenticating to YubiHSM products.

ssh -Q key | grep '^sk-'

##################################
# comment