Changes between Version 1 and Version 2 of DuoUAenroll

Timestamp:

02/04/19 12:19:32 (6 years ago)

Author:

dabantz@…

Comment:

--

DuoUAenroll

@@ -63 +63 @@
 
 *Modified with permission of Duo from https://guide.duo.com/enrollment 
+
+=== Use !YubiKey for 2FA ===
+
+1. Obtain a !YubiKey supporting OTP in form factor that works for you:
+https://www.yubico.com/products/yubikey-hardware/
+
+2. Download the !YubiKey Personalization Tool:
+https://www.yubico.com/support/knowledge-base/categories/articles/yubikey-personalization-tools/
+
+3. Configure your !ubiKey for OTP in one of its two (virtual) slots* (generally shipped already programmed for OTP in slot 1) using the Duo guide:
+https://duo.com/docs/yubikey
+
+4. Send the CSV string with digital serial no, 6 byte private id, 16 bit secret key (like this:)
+{{{4475749, e7 fe 84 57 55 d4, 81 84 65 01 22 db e5 00 57 f9 68 92 7f 22 4b 6a}}} [[BR]]
+to IAM or Security, noting your UA Username, which is the Duo account to which the token will be attached.
+
+5. IAM or Security will upload the CSV string to import your token, and assign it to your ID at Duo[[BR]]
+6. When integrated (step 5), you can use the YubiKey to send the second factor passcode 
+
+6.1 for web logins using Chrome browser, touch the key when presented with the second factor dialog box;
+there is a tell-tale message in blue banner in the pane:
+image.png
+
+6.2 for VPN login:
+In the password field type your password followed by comma then touch your key*; that is,
+
+{{{password,}}}
+then touch your key, which enters a one-time passcode.
+
+*Which of the !YubiKey's two (virtual) slots is used is determined by the duration of your touch. The first slot is used to generate the output when the YubiKey button is touched between 0.3 to 1.5 seconds and released and the second slot is used if the button is touched between 2 to 5 seconds.
+
+
+
+