Logging in with a fob-style hardware token

You can log in to IBM® OpenSSH with a valid PIN. Your administrator must have configured your account for IBM MFA Compound In-Band. This use case requires a fob-style hardware token.

Procedure

Perform the following steps:

  1. Open an OpenSSH utility connection to the z/OS® system. Consider the following examples: 
    ssh user-name@your-host
    scp files.txt user-name@your-host:/home/user-name
    You are prompted for the password.
  2. Get the 6- to 8-digit token code displayed by the SecurID token.
  3. Enter your PIN followed by the 6- to 8-digit token code displayed by the SecurID token, followed by the separator, followed by your passphrase or password in the password field. For example, assume that the separator is the colon(:). If your PIN is 4321, your token code is 456789, and your password is 12345678, enter 4321456789:12345678 in the password field.
    Note: Your security administrator can reverse the order in which you enter the credentials, so that you enter your passphrase or password first, followed by the separator. Consult your security administrator for guidance.
  4. Press Enter.
    If successful, the OpenSSH command succeeds.