Issue/Question
How do I configure a Yubico USB Security Key Fob to work with Microsoft's Two-Factor Authentication requirements?
Environment
Resolution
If you do not have an MFA Exception, please contact the
ITS Service Desk before continuing.
- Navigate to My Sign-Ins
- Log in using your WKU email address and password.
- Under My Account, click Security info.
- Click Add sign-in method.
- Click Passkey.
- Click Next.
- Click try using another device.
- Select Security key.
- You will be prompted to insert your security key into the USB port. Plug your physical USB key fob into your machine.
- You will be asked to generate a numerical PIN. This PIN needs to be at least four digits long. Enter a New PIN, confirm it, and click OK.
Note: It is extremely important that you remember this PIN. If you forget this PIN, you will be unable to reset it or access your USB Security Key Fob.
- You will be prompted to physically Touch your security key. Touch the gold circle on your USB key.
- You may be asked to physically Touch your security key again.
- You will be prompted Let's name your passkey. This name can be anything of your choosing. (Examples: WKU, WKU Key, etc.) Click Next.
- Click Done.
If you do not have an MFA Exception, please contact the
ITS Service Desk before continuing.
These steps must be completed within Google Chrome. Other web browsers will not work for this process.
- Navigate to My Sign-Ins
- Log in using your WKU email address and password.
- Under My Account, click Security info.
- Click Add sign-in method.
- Click Passkey.
- Click Next.
- Click Next.
- Click More Options.
- Insert your physical security key fob into a USB port and touch the gold circle on your USB key.
- You will be asked to generate a numerical PIN. This PIN needs to be at least four digits long. Enter a New PIN, confirm it, and click Next.
Note: It is extremely important that you remember this PIN. If you forget this PIN, you will be unable to reset it or access your USB Security Key Fob.
- You will be prompted to physically Touch your security key again. Touch the gold circle on your USB key.
- You will be prompted Let's name your passkey. This name can be anything of your choosing. (Examples: WKU, WKU Key, etc.) Click Next.
- Click Done.
- Log in to your WKU Account.
- After entering your password, you will be prompted to use your USB Security Key.
- On Mac, click USB security key.
- On Windows, click Security key.
- Insert your USB Security Key into a USB port on your device. Touch the gold circle on your USB key.
- Enter your Security Key PIN. Click OK or Next.
- You will be prompted to physically Touch your security key. Touch the gold circle on your USB key.
ITS does not provide Yubico USB Security Key fobs. If you would like to purchase one, please contact the ITS Service Desk or submit a service request by clicking the Request Service button to get information on buying a fob for your device.