The binary packages for PingID for SSH are supported on the following Linux versions:

  • Ubuntu 14.04, 16.04, 18.04, 20.04
  • Debian 8.x (Jessie), Debian 9.x (Stretch), Debian 10.x (Buster)
  • CentOS 7, 8
  • Red Hat Enterprise Linux (RHEL) 7, 8
  • OpenSUSE Leap 42.3, 15.1, 15.2, and SUSE Linux Enterprise (SLES) 15.1, 15.2.
CAUTION:

Adding multi-factor authentication (MFA) to a Unix or Linux system might result in locking you out of the system. To minimize this risk, back up your system before beginning an installation, and during an installation, keep a separate open session with root permissions.

  1. Get the public key used to sign the package.
    • On Ubuntu and Debian:

      curl -s https://packages.pingidentity.com/pub-key.gpg | sudo apt-key add -

    • On CentOS, RHEL, and SUSE:

      sudo rpm --import https://packages.pingidentity.com/pub-key.gpg

  2. Update the repository information.
    • On Ubuntu:

      Add the PingID repository to the list of sources:

      For Ubuntu 14.04: echo "deb https://packages.pingidentity.com/repo trusty trusty" | sudo tee /etc/apt/sources.list.d/pingid.list

      For Ubuntu 16.04: echo "deb https://packages.pingidentity.com/repo xenial xenial" | sudo tee /etc/apt/sources.list.d/pingid.list

      For Ubuntu 18.04: echo "deb https://packages.pingidentity.com/repo bionic bionic" | sudo tee /etc/apt/sources.list.d/pingid.list

      For Ubuntu 20.04: echo "deb https://packages.pingidentity.com/repo focal focal" | sudo tee /etc/apt/sources.list.d/pingid.list

      Update the package information from the list of sources:

      sudo apt update

    • On Debian 8.x (Jessie):
      Note:

      If you are not sure what Debian release you have, run the following command to check:

      grep PRETTY_NAME /etc/os-release

      Add the PingID repository to the list of sources:

      echo "deb http://packages.pingidentity.com/repo jessie jessie" | sudo tee /etc/apt/sources.list.d/pingid.list

      Update the package information from the list of sources:

      sudo apt update

    • On Debian 9.x (Stretch):

      Add the PingID repository to the list of sources:

      echo "deb http://packages.pingidentity.com/repo stretch stretch" | sudo tee /etc/apt/sources.list.d/pingid.list

      Update the package information from the list of sources:

      sudo apt update

    • On Debian 10.x (Buster):

      Add the PingID repository to the list of sources:

      echo "deb http://packages.pingidentity.com/repo buster buster" | sudo tee /etc/apt/sources.list.d/pingid.list

      Update the package information from the list of sources:

      sudo apt update

    • On CentOS:

      Copy file https://packages.pingidentity.com/repo/CentOS/pingidentity.repo to /etc/yum.repos.d/pingidentity.repo using the following command:

      sudo curl -o /etc/yum.repos.d/pingidentity.repo https://packages.pingidentity.com/repo/CentOS/pingidentity.repo

    • On RHEL:

      Copy file https://packages.pingidentity.com/repo/RHEL/pingidentity.repo to /etc/yum.repos.d/pingidentity.repo using the following command:

      sudo curl -o /etc/yum.repos.d/pingidentity.repo https://packages.pingidentity.com/repo/RHEL/pingidentity.repo

    • On SUSE:

      Add the PingID repository using the following command:

      sudo zypper ar https://packages.pingidentity.com/repo/SUSE/pingidentity.repo

      Refresh the repository:

      sudo zypper ref pingidentity

  3. Install the pingid package.
    • On Ubuntu and Debian:

      sudo apt install pingid

    • On CentOS and RHEL:

      sudo yum install pingid

    • On SUSE:

      sudo zypper in pingid

  4. Download the properties file. See Obtaining the PingID properties file for SSH.
  5. Copy the properties file to /etc/pingid/pingid.properties.
  6. Test the installation:
    pingid_fc -v

    You should see a message similar to the following:

    PingID API version 4.0 (Package version 4.0.12)
Configuration file: /etc/pingid/pingid.conf
  7. You can now pair an end user's device. See Pairing the end user device.