[crocowhile]

It doesn't just work by reading a passkey.

From the webpage:

* Non-intrusive. pam_usb doesn’t require any modifications of the USB storage device to work (no additional partitions required).

* USB Serial number, model and vendor verification.

[wmf]

So is it only for local console authentication? There's no way to read that stuff remotely.

[crocowhile]

Come on mate, just use a bit of imagination. You use the pam_usb module to login locally and an encrypted passkey stored on the same usb thumbdrive for remote SSH connections.