Duo / Guide: Buy a YubiKey or Feitian hardware token

Purpose

  • To provide guidance in the purchase of a YubiKey or Feitian hardware device for use with Duo Security

User

  • All current Miami University Students, Faculty, and Staff
    • Miami's alumni, retiree, emeriti, and former student populations are not required to enroll in Duo

Environment

  • 312306: Duo Security Two-factor Authentication
  • YubiKey 4 or 5 Series Security Key
    • YubiKey hardware token, Yubi
    • U2F hardware device
    • U2F authenticator
    • U2F security token
  • Feitian OTP hardware token

Rationale

  • Two-factor authentication adds a second layer of security to your Miami account. It allows you to verify your identity using a second factor — your smartphone or other mobile device, U2F or OTP hardware device, or landline — and prevents anyone else from logging in to your account

Guidelines 

  • You can purchase your YubiKey or Feitian token from Miami University's Brick & Ivy Campus Store 
  • MUIT recommends choosing one of these security devices:
    • YubiKey 5 NFC: for use in a USB-A port
    • YubiKey 5 Nano: for use in a USB-A port; designed to remain in port
    • YubiKey 5C: for use in a USB-C port
    • YubiKey 5Ci: for use in a USB-C or Lightning port
    • YubiKey 5C Nano: for use in a USB-C port; designed to remain in port
    • Feitian Single Button OTP c200 token (I34, H41 or H27)
  • The Feitian OTP tokens are key-fob type devices that display a 6–8 digit passcode that must be typed into Duo prompts and do not plug in to any other device
  • Be sure to verify which USB port-style is present on the device in which you'll be using the YubiKey
    • The difference between the 5 and 5C versions of the YubiKey tokens is the style of USB connection the device uses:
      • YubiKey 5 and 5 Nano use a USB-A connector
      • YubiKey 5C and 5C Nano use a USB-C connector
  • If you intend only to use a YubiKey on a single device, the Nano version may be your best choice — its small size allows it to be inserted and left in a device without protruding much
  • If you intend to use a YubiKey on multiple devices or frequently remove it from a device, the standard version may be a better choice — its larger size makes it less likely to be lost
  • The YubiKey Personalization Tool is now available in Self Service for Mac (how to access) and the Software Center for Windows (how to access) 
    • The Mac version is a VPP app from the AppStore and will be automatically upgraded as YubiCo publishes new versions to Apple

 

Notes

 

Print Article