diff --git a/0006-totp-motd.patch b/0006-totp-motd.patch
new file mode 100644
index 0000000..0cf03ee
--- /dev/null
+++ b/0006-totp-motd.patch
@@ -0,0 +1,10 @@
+--- a/src/systemd/inactive.motd
++++ b/src/systemd/inactive.motd
+@@ -1,2 +1,7 @@
+ Activate the web console with: systemctl enable --now cockpit.socket
+ 
++Note: Cockpit disallows root login by default.
++To create a regular user and optionally enable 2FA run both:
++
++jeos-config user
++jeos-config otp
diff --git a/_scmsync.obsinfo b/_scmsync.obsinfo
index 6f13f05..62376e9 100644
--- a/_scmsync.obsinfo
+++ b/_scmsync.obsinfo
@@ -1,4 +1,4 @@
-mtime: 1726672723
-commit: 95f291257bf63a3a7f7bd4cdd1428b39511f941d934fca81709f621a8058e0ee
+mtime: 1728470768
+commit: 17cc1c2b4c2695ee860c7956a19d7f862a23d983f3fb5bf28a7e5d8ad6f43358
 url: https://src.opensuse.org/cockpit/cockpit.git
-revision: 95f291257bf63a3a7f7bd4cdd1428b39511f941d934fca81709f621a8058e0ee
+revision: 17cc1c2b4c2695ee860c7956a19d7f862a23d983f3fb5bf28a7e5d8ad6f43358
diff --git a/build.specials.obscpio b/build.specials.obscpio
index 0717a07..c92b03a 100644
--- a/build.specials.obscpio
+++ b/build.specials.obscpio
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:c892c17769a0cd3117628ce0b5e833500d7ab5431a26b388cddd58cd2ca3fe31
+oid sha256:7ca394ebffdda88aeeb8a84036fc2e6cca39d8a0b3465c206f860e47e793fc9a
 size 256
diff --git a/cockpit.changes b/cockpit.changes
index 920db96..8f1b897 100644
--- a/cockpit.changes
+++ b/cockpit.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Sep 30 07:08:12 UTC 2024 - Alice Brooks <alice.brooks@suse.com>
+
+- add 0006-totp-motd.patch for guidance to enabling totp to the mtod
+
 -------------------------------------------------------------------
 Wed Sep 18 12:37:18 UTC 2024 - Jan Zerebecki <jan.suse@zerebecki.de>
 
diff --git a/cockpit.spec b/cockpit.spec
index ba164c2..aadc09e 100644
--- a/cockpit.spec
+++ b/cockpit.spec
@@ -68,6 +68,7 @@ Patch5:         storage-btrfs.patch
 # SLE Micro specific patches
 Patch101:       hide-pcp.patch
 Patch102:       0002-selinux-temporary-remove-setroubleshoot-section.patch
+Patch107:       0006-totp-motd.patch
 # For anything based on SLES 15 codebase (including Leap, SLE Micro)
 Patch103:       0004-leap-gnu18-removal.patch
 Patch104:       selinux_libdir.patch
@@ -229,6 +230,7 @@ BuildRequires:  python3-tox-current-env
 %patch -P 4 -p1
 %patch -P 5 -p1
 %patch -P 106 -p1
+%patch -P 107 -p1
 
 # SLE Micro specific patches
 %if 0%{?is_smo}
@@ -526,6 +528,7 @@ Requires: cockpit-bridge >= %{version}-%{release}
 Requires: shadow-utils
 %endif
 Requires: grep
+Requires: jeos-firstboot
 Requires: /usr/bin/pwscore
 Requires: /usr/bin/date
 Provides: cockpit-shell = %{version}-%{release}