Issue/Question
How do I configure a Yubico USB Security Key Fob to work with Microsoft's Two-Factor Authentication requirements?
Environment
Resolution
- Navigate to https://aka.ms/mfasetup
- Log in using your WKU email address and password.
- On the More information required screen, click Next.
- You will be prompted to set up Microsoft Authenticator, click I want to set up a different method.
- Select Phone, and then click Confirm.
- Enter your phone number, including area code, into the Enter phone number field.
- Choose to Receive a code or Call me and then click Next.
- If you chose Receive a code, you’ll receive a text message containing a 6-digit code. Enter this code into the Enter code field and then click Next.
- If you chose Call me, you’ll receive a phone call. Answer the call, listen to the instructions, and then press pound key.
- Click Next.
- Click Done.
- You may be prompted to enter your WKU email password again, do so and click Sign in.
- If prompted to authenticate again, choose Text or Call.
- If asked to Stay signed in, click Yes.
- Once authenticated, you’ll arrive at the WKU My Sign-Ins page. Select Security info in the left pane.
- Click Add sign-in method.
- Select Security key and then click Add.
- Select USB device.
- Click Next.
- You’ll be asked where to save your passkey. Select Security key and then click Next.
- Click OK.
- Click OK.
- You will be prompted to insert your security key into the USB port. Plug your physical USB key fob into your machine.
- You will be asked to generate a numerical PIN. This PIN needs to be at least four digits long. Enter a PIN and click OK.
Note: It is extremely important that you remember this PIN. If you forget this PIN, you will be unable to reset it or access your USB Security Key Fob.
- You will be prompted to physically Touch your security key. Touch the gold circle on your USB key.
- Click OK.
- You will be prompted to Enter a security key name. This name can be anything of your choosing. (Examples: WKU, WKU Key, etc.) Click Next.
- Click Done. Your security key is now tied to your WKU email account.
These steps must be completed from within Google Chrome. Other web browsers will not work for this process.
- Navigate to https://aka.ms/mfasetup
- Log in using your WKU email address and password.
- On the More information required screen, click Next.
- You will be prompted to set up Microsoft Authenticator, click I want to set up a different method.
- Select Phone, and then click Confirm.
- Enter your phone number, including area code, into the Enter phone number field.
- Choose to Receive a code or Call me and then click Next.
- If you chose Receive a code, you’ll receive a text message containing a 6-digit code. Enter this code into the Enter code field and then click Next.
- If you chose Call me, you’ll receive a phone call. Answer the call, listen to the instructions, and then press pound key.
- Click Next.
- Click Done.
- You may be prompted to enter your WKU email password again, do so and click Sign in.
- If prompted to authenticate again, choose Text or Call.
- If asked to Stay signed in, click Yes.
- Once authenticated, you’ll arrive at the WKU My Sign-Ins page. Select Security info in the left pane.
- Click Add sign-in method.
- Select Security key and then click Add.
- Select USB device.
- Click Next.
- Select USB security key.
- Insert your physical security key fob into a USB port.
- You will be asked to generate a numerical PIN. This PIN needs to be at least four digits long. Enter a PIN and click Next.
Note: It is extremely important that you remember this PIN. If you forget this PIN, you will be unable to reset it or access your USB Security Key Fob.
- You will be prompted to physically Touch your security key. Touch the gold circle on your USB key.
- Click Allow.
- You will be prompted to Enter a security key name. This name can be anything of your choosing. (Examples: WKU, WKU Key, etc.) Click Next.
- Click Done. Your security key is now tied to your WKU email account and can be used to authenticate.
- Log into your WKU Email.
- After entering your password, you will be prompted to use your USB Security Key.
- On Mac, click USB security key.
- On Windows, click Security key and then click Next.
- Insert your USB Security Key into a USB port on your device. Touch the golden circle on your USB key, if prompted.
- Enter your Security Key PIN. Click OK or Next.
- You will be prompted to physically Touch your security key. Touch the gold circle on your USB key.
- If asked to Stay signed in, click Yes.
ITS does not provide Yubico USB Security Key fobs. If you would like to purchase one, please contact the ITS Service Desk or submit a service request by clicking the Request Service button to get information on buying a fob for your device.