PCI 4.0 requires 12 character PW with OTP

[hotjavajoe]

We are currently using OpenVPN with FreeRadius to get 2FA but it uses a combination of a 4 digit pin and the OTP as the password. The new PCI 4.0 spec going into effect next year requires a 12 character password. How can we get both a password and a Google authenticator OTP?