TSYS Group » Chief Operations Officer » Known Element Enterprises - Technology & Facility Services

Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance).

Lock down the localuser account with mandatory 2FA (TOTP) across all entry points: SSH, Cockpit, Webmin.

Scope¶

• Finish/verify security_2fa KNELIAC role (TOTP for SSH/Cockpit/Webmin - partially done)
• Enforce mandatory 2FA on localuser across all systems
• Validate in sectestbed-* before prod

Context¶

• Partial work done: 2FA (TOTP for SSH/Cockpit/Webmin) via security_2fa role.
• Roles executed via tsys-awx (AWX).

Dependencies¶

Depends on #379 (test lab). Blocks #385 (SSH certificates).