Description
Universal 2nd Factor devices can be required in PAM authentication. Administrators install this development build when hardware-backed second-factor checks should protect logins.
U2F depends on enrolled devices and recovery policy. Keep backup keys or alternate recovery access before requiring it.