SSH Authentication Methods

Regarding to PCI-DSS Regulation 8.3, a server open to Internet require multi factor authentication for any remote login session.