--- title: Teleport 11 | daily.dev description: Teleport 11 introduces hardware-backed private keys stored on YubiKey (Enterprise, Server Access only), server-side SFTP support replacing SCP for IDE... canonical: https://daily.dev/posts/teleport-11-v3qrafij6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Teleport 11 | daily.dev og:description: Teleport 11 introduces hardware-backed private keys stored on YubiKey (Enterprise, Server Access only), server-side SFTP support replacing SCP for IDE... og:url: https://daily.dev/posts/teleport-11-v3qrafij6 og:image: https://api.daily.dev/og/posts/V3QrAfij6.png og:image:alt: Teleport 11 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Teleport 11 **[Teleport](https://daily.dev/sources/teleport)** · 5 min read · 0 upvotes · 0 comments ## Summary Teleport 11 introduces hardware-backed private keys stored on YubiKey (Enterprise, Server Access only), server-side SFTP support replacing SCP for IDE integrations like VSCode and JetBrains, and Helm chart changes that remove the need for persistent storage by storing identities in Kubernetes Secrets. It also adds EKS/AKS auto-discovery, expanded Azure integration including auto-discovery for Azure-hosted PostgreSQL/MySQL and Azure AD managed identity auth for SQL Server, Cassandra and ScyllaDB database access support, GitHub Actions support for Machine ID, a new GitHub Action for Teleport binary setup, Terraform plugin support for Machine ID Bots, and Access Requests plus file transfer in Teleport Connect. Breaking changes accompany the release and are detailed in the GitHub release notes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What new features does Teleport 11 add for securing access? Teleport 11 adds hardware-backed private key storage on YubiKey devices for tsh and Connect clients, available in Teleport Enterprise for Server Access only. It also introduces server-side SFTP protocol support, replacing the need for the less secure SCP protocol, which benefits IDEs like VSCode and JetBrains tools that rely on SFTP for remote file browsing and editing. _daily.dev helps infrastructure teams track access-control releases like this one before upgrading production systems._ ### Does upgrading to Teleport 11 require changing my Kubernetes Helm deployment storage? No manual storage changes are required. Teleport 11 stores service and Kubernetes-managed resource identities in Kubernetes Secrets instead of persistent storage, and migrates existing deployments from a Kubernetes Deployment to a StatefulSet automatically during the Helm upgrade to version 11. _Teams planning Kubernetes upgrades can follow release breakdowns like this on daily.dev before rolling out changes._ ### Does Teleport Machine ID support GitHub Actions? Yes, Teleport 11 adds GitHub Actions support to Machine ID, letting teams manage resources directly from GitHub Actions workflows without persistent secrets. A companion GitHub Action for setting up Teleport binaries in workflow environments was also released, and the Teleport Terraform plugin now supports creating Machine ID Bots and Bot Tokens. _daily.dev keeps CI/CD engineers current on secretless authentication changes like this Machine ID update._ ## Similar posts on daily.dev - [Stop managing SSH keys on every server and switch to Teleport](https://daily.dev/posts/stop-managing-ssh-keys-on-every-server-and-switch-to-teleport-zoja48gov) · All Things Open · 0 upvotes · 0 comments --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes) [View this post on daily.dev](https://daily.dev/posts/teleport-11-v3qrafij6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Teleport 11","url":"https://daily.dev/posts/teleport-11-v3qrafij6","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teleport-11-v3qrafij6"},"datePublished":"2026-08-23T12:21:53.947Z","dateModified":"2026-08-23T12:45:23.369Z","description":"Teleport 11 introduces hardware-backed private keys stored on YubiKey (Enterprise, Server Access only), server-side SFTP support replacing SCP for IDE...","image":"https://media.daily.dev/image/upload/s--ZrL_HSsR--/f_auto/v1722860399/public/Placeholder%2006","thumbnailUrl":"https://media.daily.dev/image/upload/s--ZrL_HSsR--/f_auto/v1722860399/public/Placeholder%2006","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teleport-11-v3qrafij6","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Teleport 11"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/teleport-11-v3qrafij6#faq","mainEntity":[{"@type":"Question","name":"What new features does Teleport 11 add for securing access?","acceptedAnswer":{"@type":"Answer","text":"Teleport 11 adds hardware-backed private key storage on YubiKey devices for tsh and Connect clients, available in Teleport Enterprise for Server Access only. It also introduces server-side SFTP protocol support, replacing the need for the less secure SCP protocol, which benefits IDEs like VSCode and JetBrains tools that rely on SFTP for remote file browsing and editing. daily.dev helps infrastructure teams track access-control releases like this one before upgrading production systems."}},{"@type":"Question","name":"Does upgrading to Teleport 11 require changing my Kubernetes Helm deployment storage?","acceptedAnswer":{"@type":"Answer","text":"No manual storage changes are required. Teleport 11 stores service and Kubernetes-managed resource identities in Kubernetes Secrets instead of persistent storage, and migrates existing deployments from a Kubernetes Deployment to a StatefulSet automatically during the Helm upgrade to version 11. Teams planning Kubernetes upgrades can follow release breakdowns like this on daily.dev before rolling out changes."}},{"@type":"Question","name":"Does Teleport Machine ID support GitHub Actions?","acceptedAnswer":{"@type":"Answer","text":"Yes, Teleport 11 adds GitHub Actions support to Machine ID, letting teams manage resources directly from GitHub Actions workflows without persistent secrets. A companion GitHub Action for setting up Teleport binaries in workflow environments was also released, and the Teleport Terraform plugin now supports creating Machine ID Bots and Bot Tokens. daily.dev keeps CI/CD engineers current on secretless authentication changes like this Machine ID update."}}]} ```