Duo / Use a hardware token to authenticate

Objective

• To provide instruction on authenticating with a Yubikey or Feitian hardware token and Duo
  • Use a Yubikey or Feitian hardware token to authenticate with Duo

Scope

• MUIT recommends and supports the use of a YubiKey hardware device for U2F or OTP authentication with Duo
• MUIT recommends and supports the use of a Feitian hardware token for OTP authentication with Duo

Environment

• Duo Security Two-factor Authentication
• YubiKey 4 or 5 Series Security Key
  • YubiKey hardware token, Yubi
  • U2F hardware device
  • U2F authenticator
  • U2F security token
• Feitian OTP hardware tokens

Rationale

• Two-factor authentication adds a second layer of security to your Miami account. It allows you to verify your identity using a second factor — your smartphone or other mobile device, U2F or OTP device — and prevents anyone else from logging in to your account

Resolution 

For YubiKeys

1. Make sure your YubiKey device is inserted into the USB port of the device with which you are authenticating
2. Provide your Miami UniqueID and password
3. When prompted for your second factor authentication, click Enter a Passcode
4. Touch your YubiKey device, and it should populate the passcode field and automatically finish logging in

• Important Note
  • If you intend to use a Yubikey when authenticating with Duo to VPN, you must have the YubiKey configured by a Duo Administrator in the Duo Admin console
  • To make this request, contact ITHelp by phone at 513-529-7900 or via live chat and ask to have your YubiKey token configured for use with VPN. IT Services will ask for three pieces of information about your YubiKey — the serial number, private identity and secret key — which you will find in the YubiKey personalization tool

For Feitian tokens

1. Provide your Miami UniqueID and password
2. When prompted for your second factor authentication, click Enter a Passcode
3. Press the button on the Feitian token to display the 6–8 digit passcode and enter it in the passcode field

Notes

• This Duo guide will tell you more about using a U2F authenticator — your YubiKey — with Duo
• Visit the Yubico Knowledge Base