Duo / Guide: Buy a YubiKey or Feitian hardware token

Purpose

• To provide guidance in the purchase of a YubiKey or Feitian hardware device for use with Duo Security

User

• All current Miami University Students, Faculty, and Staff
  • Miami's alumni, retiree, emeriti, and former student populations are not required to enroll in Duo

Environment

• 312306: Duo Security Two-factor Authentication
• YubiKey 4 or 5 Series Security Key
  • YubiKey hardware token, Yubi
  • U2F hardware device
  • U2F authenticator
  • U2F security token
• Feitian OTP hardware token

Rationale

• Two-factor authentication adds a second layer of security to your Miami account. It allows you to verify your identity using a second factor — your smartphone or other mobile device, U2F or OTP hardware device, or landline — and prevents anyone else from logging in to your account

Guidelines 

• You can purchase your YubiKey or Feitian token from Miami University's Brick & Ivy Campus Store 
  • Or you can purchase your YubiKey online at Yubico's website
  • Or you can purchase your Feitian token online at Feitian's website
• MUIT recommends choosing one of these security devices:
  • YubiKey 5 NFC: for use in a USB-A port
  • YubiKey 5 Nano: for use in a USB-A port; designed to remain in port
  • YubiKey 5C: for use in a USB-C port
  • YubiKey 5Ci: for use in a USB-C or Lightning port
  • YubiKey 5C Nano: for use in a USB-C port; designed to remain in port
  • Feitian Single Button OTP c200 token (I34, H41 or H27)
• The Feitian OTP tokens are key-fob type devices that display a 6–8 digit passcode that must be typed into Duo prompts and do not plug in to any other device
• Be sure to verify which USB port-style is present on the device in which you'll be using the YubiKey
  • The difference between the 5 and 5C versions of the YubiKey tokens is the style of USB connection the device uses:
    • YubiKey 5 and 5 Nano use a USB-A connector
    • YubiKey 5C and 5C Nano use a USB-C connector
• If you intend only to use a YubiKey on a single device, the Nano version may be your best choice — its small size allows it to be inserted and left in a device without protruding much
• If you intend to use a YubiKey on multiple devices or frequently remove it from a device, the standard version may be a better choice — its larger size makes it less likely to be lost
• The YubiKey Personalization Tool is now available in Self Service for Mac (how to access) and the Software Center for Windows (how to access) 
  • The Mac version is a VPP app from the AppStore and will be automatically upgraded as YubiCo publishes new versions to Apple

Notes

• The only YubiKey device that will not work with Miami's Duo implementation is the YubiKey FIDO U2F Security Key
• Check our KB article for YubiKey resource and support links