This document describes the process to register a Security Key, also known as a Universal 2-Factor (U2F) device, for MFA-Duo.
MFA only supports the U2F authentication method in the Google Chrome browser, so we highly recommend you use the U2F feature as a SECONDARY authentication method and have at least one other device enrolled.
Login to the MFA Portal.
Click Register Token/Fob or USB Security Key.
Click USB Security Key.
Enter the serial number, found on the back of the USB device. Plug the device into a USB port, and tap the button on the device to enter a six-digit passcode into the field under Step 3.
In the lower window, authenticate to duo using your USB token. Then click +Add another device. Select Security Key.
Click Continue to bring up a popup window for enrolling your security key. The key will need to be plugged into a USB port on your computer.
Tap the button on your device to complete enrollment.
If run into any issues or have any questions, please contact the DoIT Help Desk.
The security key allows MFA-Duo users to insert the security key into the USB port of their computer or laptop to authenticate. This security key requires a reachable USB port, but this security key also works with a laptop or desktop USB to USB-C adaptor. The key is not compatible with mobile devices and only works with laptop or desktop computers.
The security key experience is slightly different for the following modes of logging in:
See below for details on these modes.
Chrome web browser login
When logging in to a UW–Madison website or apps using Chrome (version 70 or later), insert the security key into your USB port, select Security Key (U2F) from the device dropdown menu, and lightly touch the impressed sensor button to initiate login.
Non-Chrome web browser or local software login
When logging into a UW–Madison website or app in Firefox or Safari, insert the security key into your USB port. Select Token from the device dropdown menu, and click the "Enter passcode" button to make the passcode input field editable. Then lightly touch the impressed sensor button to insert the passcode in the input field. If you are using a screen reader or other assistive technology, the security key may enter the passcode so quickly you may not hear the full code. The audio cue may only include the last digit of the code. Click the login button to complete authentication, as the full code should have populated the field.
(See How to use a Feitian USB Security Key for more details and screenshots on the Chrome web browser login.)
How to get a security key
Faculty and Staff New staff: Get a Feitian security key from your HR representative. Feitian security keys can also be picked up at the Walk-In Help Desk at 1210 W. Dayton Street Madison, WI 53706. Current staff can get a Feitian security key at the Walk-In Help Desk at 1210 W. Dayton Street Madison, WI 53706.
Students: Get a token or security key at no charge, at either the Walk-in Help Desk at 1210 W. Dayton St. or the pop-up Help Desks from early September through October 31, 2019. Locations and times for the pop-up Help Desks will be posted on the UW–Madison Events Calendar soon. After October 31, tokens or security keys can be picked up at the Walk-In Help Desk at 1210 W. Dayton St. For other assistance, contact the DoIT Help Desk at (608) 264-4357 or email firstname.lastname@example.org.
See accessibility & usability information
We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.
How to get access to a Security Key or Duo Token/Fob
Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email email@example.com. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.
Faculty, Staff, and Researchers
Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email firstname.lastname@example.org.