IMSS
/
Services
/
Information Security
/
Duo Multi-factor Authentication
/
Authentication Methods
/
- YubiKey Security Key
How to use YubiKey Security Key
A YubiKey is a hardware device for Duo two-factor authentication. Models vary in capabilities—some function only as security keys, while others also generate passcodes. This document describes using a YubiKey as a security key.
How YubiKey security key works
A YubiKey security key can only be used with browser-based applications; it does not support command-line and Windows login. After you log in with your username and password, Duo prompts you to "Use your security key". Tap the button on your YubiKey device.
How to set up YubiKey security key
- Navigate to the Duo Device Management Portal.
- Select "Add a device" then select "Security key" and "Continue"
- Follow the prompts on the screen to set up the YubiKey security key. If you are prompted to save a security using a mobile device, select the option "Use a different phone, tablet, or security key".
- When prompted to "Insert and touch your security key", make sure the YubiKey device is inserted into your computer, then tap the button on the key.
How to authenticate using YubiKey security key
- Log in to a Duo-protected service using your username and password
- Duo will prompt you to "Use your security key", or "Insert your security key and touch it". If you do not see the this prompt, Duo may have defaulted to a different authentication method. Click "Other options" and then "Security key" to manually select this option. If you do not see "Security key" in the list of options, you have not set up this method yet. Refer to the instructions above.
- Insert the YubiKey into a USB port in your computer if it is not connected already. When prompted to "Use your security key", tap the button on the key.