Note:

This assumes that you specified --prefix=/usr in the configure command.

  1. Edit the /etc/security/login.cfg file and change this line near the bottom of the file.
    From: 
    auth_type = STD_AUTH
    To: 
    auth_type = PAM_AUTH
  2. Edit the /etc/pam.conf file as follows:
    • To add MFA to SSH: Change the lines starting with sshd:
      From:
      sshd auth required pam_aix
      To: 
      sshd auth requisite pam_aix
sshd auth required /usr/lib/security/pam_pingid.so
    • To add MFA to SU: Change the lines starting with su:
      From:
      su auth sufficient pam_allowroot
su auth required pam_aix
      To: 
      su auth sufficient pam_allowroot
su auth requisite pam_aix
su auth required /usr/lib/security/pam_pingid.so
Pair the end user device. For more information, see Pairing the end user device.