Description
Cryptographic tokens can be used for local PAM authentication. Administrators install this module when smart cards or USB tokens should verify user access.
Token authentication depends on device custody, certificate trust, and fallback policy. Test enrollment and recovery before requiring it.