# KNEL SSH 2FA Configuration Additions # These settings enable two-factor authentication with SSH keys # Enable challenge-response authentication for 2FA ChallengeResponseAuthentication yes # Enable PAM UsePAM yes # Require both publickey AND keyboard-interactive (2FA) AuthenticationMethods publickey,keyboard-interactive