Use a hardware token to authenticate / Duo

Problem

• How do I authenticate with a Yubikey or Feitian hardware token and Duo?
• How do I use a Yubikey or Feitian hardware token to authenticate with Duo?

Rationale

• MUIT recommends and supports the use of a YubiKey hardware device for U2F or OTP authentication with Duo
• MUIT recommends and supports the use of a Feitian hardware token for OTP authentication with Duo

Resolution 

For YubiKeys

1. Make sure your YubiKey device is inserted into the USB port of the device with which you are authenticating
2. Provide your Miami UniqueID and password
3. When prompted for your second factor authentication, click Enter a Passcode
4. Touch your YubiKey device, and it should populate the passcode field and automatically finish logging in

• Important Note
  • If you intend to use a Yubikey when authenticating with Duo to VPN, you must have the YubiKey configured by a Duo Administrator in the Duo Admin console
  • To make this request, contact ITHelp by phone at 513-529-7900 or via live chat and ask to have your YubiKey token configured for use with VPN. IT Services will ask for three pieces of information about your YubiKey — the serial number, private identity and secret key — which you will find in the YubiKey personalization tool

For Feitian tokens

1. Provide your Miami UniqueID and password
2. When prompted for your second factor authentication, click Enter a Passcode
3. Press the button on the Feitian token to display the 6–8 digit passcode and enter it in the passcode field

Notes

• This Duo guide will tell you more about using a U2F authenticator — your YubiKey — with Duo
• Visit the Yubico Knowledge Base

User

• All current Miami University Students, Faculty, and Staff, plus Alumni, Retirees, and Emeriti are required to enroll in Duo

System

• 312306: Duo Security two-factor authentication
• YubiKey 4 or 5 Series Security Key
  • YubiKey hardware token, Yubi
  • U2F hardware device
  • U2F authenticator
  • U2F security token
• Feitian OTP hardware tokens