Duo / Use a hardware token to authenticate

Note: Effective Tuesday July 14th, 2020 the Duo "Call Me" and landline methods are no longer available

Objective

  • To provide instruction on authenticating with a Yubikey or Feitian hardware token and Duo
    • Use a Yubikey or Feitian hardware token to authenticate with Duo

Scope

  • MUIT recommends and supports the use of a YubiKey hardware device for U2F or OTP authentication with Duo
  • MUIT recommends and supports the use of a Feitian hardware token for OTP authentication with Duo

Environment

  • Duo Security Two-factor Authentication
  • YubiKey 4 or 5 Series Security Key
    • YubiKey hardware token, Yubi
    • U2F hardware device
    • U2F authenticator
    • U2F security token
  • Feitian OTP hardware tokens

Rationale

  • Two-factor authentication adds a second layer of security to your Miami account. It allows you to verify your identity using a second factor — your smartphone or other mobile device, U2F or OTP device — and prevents anyone else from logging in to your account

Resolution 

For YubiKeys

  1. Make sure your YubiKey device is inserted into the USB port of the device with which you are authenticating
  2. Provide your Miami UniqueID and password
  3. When prompted for your second factor authentication, click Enter a Passcode
  4. Touch your YubiKey device, and it should populate the passcode field and automatically finish logging in
  • Important Note
    • If you intend to use a Yubikey when authenticating with Duo to VPN, you must have the YubiKey configured by a Duo Administrator in the Duo Admin console
    • To make this request, send an email to ithelp@miamioh.edu and ask to have your YubiKey token configured for use with VPN. IT Services will call you back and ask for three pieces of information about your YubiKey — the serial number, private identity and secret key — which you will find in the YubiKey personalization tool

 

For Feitian tokens

  1. Provide your Miami UniqueID and password
  2. When prompted for your second factor authentication, click Enter a Passcode
  3. Press the button on the Feitian token to display the 6–8 digit passcode and enter it in the passcode field

 

Notes

 

Was this helpful?
0 reviews

Details

Article ID: 60344
Created
Tue 8/14/18 12:42 PM
Modified
Thu 7/23/20 10:39 AM
Can you resolve this issue yourself?
Yes! This is self-service with a smile.