diff --git a/man/homectl.xml b/man/homectl.xml index 6ed8e90bf1..89af3d77c7 100644 --- a/man/homectl.xml +++ b/man/homectl.xml @@ -376,6 +376,9 @@ Note that FIDO2 devices suitable for this option must implement the hmac-secret extension. Most current devices (such as the YubiKey 5 series) do. If the extension is not implemented the device cannot be used for unlocking home directories. + + The FIDO2 device may be subsequently removed by setting the device path to an empty string + (e.g. homectl update $USER --fido2-device=""). Note that many hardware security tokens implement both FIDO2 and PKCS#11/PIV (and thus may be used with either or ), for a