MFA-Duo - What if my token stops working?

This document explains what to do if your token stops working.

Note: This document is intended for tokens that have already been registered with your account. If you have not yet registered your token, see MFA-Duo - How to Register a Token/Fob

Incorrect Passcode Errors

Your token can get "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login.

Tokenoutofsyncerror-cropped.png

If this happens to your token, you will see the error message above when attempting to log in. Your token can get "out of sync" by accident if it is stored next to other objects in a pocket, backpack, etc. or if the button is intentionally pressed repeatedly. There are two ways to resynchronize your token/fob.

Method One

To resynchronize your token/fob using the first method, follow the steps below:

  1. Log in with your NetID and password to the Duo Device Management Portal and click on Resynchronize Token/Fob.

  2. MFADuoresyncutilityaccessfromportal-cropped.png
  3. Generate three distinct passcodes using your token/fob and enter each into one of the blank fields. Click Resynchronize Token/Fob.

  4. MFADuoresyncutilitymainpage-cropped.png
  5. You will see the below notification if your token/fob has been resynchronized successfully.

  6. MFADuoresyncutilitysuccess-cropped.png

Method Two

To resynchronize your token/fob using the second method, generate three passcodes in a row and attempt to log in with each passcode. You'll need to delete the passcode from the entry field before generating the next passcode and attempting to log in. On the fourth attempt, you should be able to log in.

If your token still doesn't allow you to authenticate after trying both resynchronization methods, please call the DoIT Help Desk at (608) 264-HELP (4357).

MFADuoresyncutilityfailure-cropped.png

Token Display No Longer Works

This is an indication that the token's battery has died. Since the batteries cannot be replaced, you'll need to obtain a replacement token. If prior to March 2019, contact your department's Implementation Partner to get a new token. After March 2019, visit the DoIT Tech Store on Dayton Street to obtain a new token.





Keywords:keyfob token stop stops desync desynchronized key fob won't work broken passcode resynchronize synchronize sync resync re-sync unsync   Doc ID:86312
Owner:Marc T.Group:Multi-Factor Authentication (MFA)
Created:2018-10-09 10:17 CSTUpdated:2018-12-11 15:45 CST
Sites:DoIT Help Desk, DoIT Tech Store, Multi-Factor Authentication (MFA)
Feedback:  1   1