Support #384
Updated by Charles N 1 day ago
Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance). Lock down the localuser account with mandatory 2FA (TOTP) across all entry points: SSH, Cockpit, Webmin. ## Scope - [ ] Finish/verify security_2fa KNELIAC role (TOTP for SSH/Cockpit/Webmin - partially done) - [ ] Enforce mandatory 2FA on localuser across all systems - [ ] Validate in sectestbed-* before prod ## Context - Partial work done: 2FA (TOTP for SSH/Cockpit/Webmin) via security_2fa role. - Roles executed via tsys-awx (AWX). ## Dependencies Depends on #379 #1 (test lab). **Blocks** #385 #7 (SSH certificates).