Note:

This assumes that you specified --prefix=/usr in the configure command.

  1. Edit the /etc/security/login.cfg file and change this line near the bottom of the file.
    From:
    auth_type = STD_AUTH
    To:
    auth_type = PAM_AUTH
  2. Edit the /etc/pam.conf file as follows:
    • To add MFA to SSH: Change the lines starting with sshd:
      From:
      sshd auth required pam_aix
      To:
      sshd auth requisite pam_aix
      sshd auth required /usr/lib/security/pam_pingid.so
    • To add MFA to SU: Change the lines starting with su:
      From:
      su auth sufficient pam_allowroot
      su auth required pam_aix
      To:
      su auth sufficient pam_allowroot
      su auth requisite pam_aix
      su auth required /usr/lib/security/pam_pingid.so