Implementing Google-Authenticator for SSH

CentOS

yum install epel-release
yum install google-authenticator

Edit /etc/pam.d/sshd add auth required pam_google_authenticator.so as the second line (or first method of auth near the top)

Edit /etc/ssh/sshd_config and make sure ChallengeResponseAuthentication yes is set.

Run google-authenticator as your user to set the TOTP and choose various options for it.