The binary packages for PingID for SSH are supported on the following Linux versions:

  • Ubuntu 14.04, 16.04, 18.04, 20.04
  • Debian 8.x (Jessie), Debian 9.x (Stretch), Debian 10.x (Buster)
  • CentOS 7, 8
  • Red Hat Enterprise Linux (RHEL) 7, 8
  • OpenSUSE Leap 42.3, 15.1, 15.2, and SUSE Linux Enterprise (SLES) 15.1, 15.2.
CAUTION:

Adding multi-factor authentication (MFA) to a Unix or Linux system might result in locking you out of the system. To minimize this risk, back up your system before beginning an installation, and during an installation, keep a separate open session with root permissions.

  1. Get the public key used to sign the package.
    • On Ubuntu and Debian:
      curl -s https://packages.pingidentity.com/pub-key.gpg | sudo apt-key add -
    • On CentOS, RHEL, and SUSE:
      sudo rpm --import https://packages.pingidentity.com/pub-key.gpg
  2. Update the repository information.
    • On Ubuntu:
      1. Add the PingID repository to the list of sources:
        • For Ubuntu 14.04: 
          echo "deb https://packages.pingidentity.com/repo trusty trusty" | sudo tee /etc/apt/sources.list.d/pingid.list
        • For Ubuntu 16.04: 
          echo "deb https://packages.pingidentity.com/repo xenial xenial" | sudo tee /etc/apt/sources.list.d/pingid.list
        • For Ubuntu 18.04: 
          echo "deb https://packages.pingidentity.com/repo bionic bionic" | sudo tee /etc/apt/sources.list.d/pingid.list
        • For Ubuntu 20.04: 
          echo "deb https://packages.pingidentity.com/repo focal focal" | sudo tee /etc/apt/sources.list.d/pingid.list
      2. Update the package information from the list of sources:
        sudo apt update
    • On Debian 8.x (Jessie):
      Note:

      If you are not sure what Debian release you have, run the following command to check:

      grep PRETTY_NAME /etc/os-release
      1. Add the PingID repository to the list of sources:
        echo "deb http://packages.pingidentity.com/repo jessie jessie" | sudo tee /etc/apt/sources.list.d/pingid.list
      2. Update the package information from the list of sources:
        sudo apt update
    • On Debian 9.x (Stretch):
      1. Add the PingID repository to the list of sources:
        echo "deb http://packages.pingidentity.com/repo stretch stretch" | sudo tee /etc/apt/sources.list.d/pingid.list
      2. Update the package information from the list of sources:
        sudo apt update
    • On Debian 10.x (Buster):
      1. Add the PingID repository to the list of sources:
        echo "deb http://packages.pingidentity.com/repo buster buster" | sudo tee /etc/apt/sources.list.d/pingid.list
      2. Update the package information from the list of sources:
        sudo apt update
    • On CentOS:
      1. Copy file https://packages.pingidentity.com/repo/CentOS/pingidentity.repo to /etc/yum.repos.d/pingidentity.repo using the following command:
        sudo curl -o /etc/yum.repos.d/pingidentity.repo https://packages.pingidentity.com/repo/CentOS/pingidentity.repo
    • On RHEL:
      1. Copy file https://packages.pingidentity.com/repo/RHEL/pingidentity.repo to /etc/yum.repos.d/pingidentity.repo using the following command:
        sudo curl -o /etc/yum.repos.d/pingidentity.repo https://packages.pingidentity.com/repo/RHEL/pingidentity.repo
    • On SUSE:
      1. Add the PingID repository using the following command:
        sudo zypper ar https://packages.pingidentity.com/repo/SUSE/pingidentity.repo
      2. Refresh the repository:
        sudo zypper ref pingidentity
  3. Install the PingID package.
    • On Ubuntu and Debian:
      sudo apt install pingid
    • On CentOS and RHEL:
      sudo yum install pingid
    • On SUSE:
      sudo zypper in pingid
  4. Download the properties file. See Integrate PingID with SSH.
  5. Copy the properties file to /etc/pingid/pingid.properties.
  6. Test the installation: 
    pingid_fc -v

    You should see a message similar to the following:

    PingID API version 4.0 (Package version 4.0.12)
Configuration file: /etc/pingid/pingid.conf
  7. You can now pair an end user's device. See Pairing the end user device.