Security keys are physical authentication devices that connect to a computer via USB and allow the user the authenticate with the push of a button. If you want to add a security key to your Duo Security account, you can do so by following the instructions below. For the purposes of this article, it is assumed you are already enrolled in Duo. For more information about the process of setting up a security key (whether you are already enrolled in Duo or not), see Duo's article on the topic here.
Accessing the Duo Security Prompt
You'll need to reach the Duo Security prompt in order to start the process. If you have previously checked the Remember me for 7 days checkbox on the Duo Security prompt, the prompt may be bypassed when signing in using your OnePass credentials. If that is the case, open an Incognito Window in Chrome, then go to my.berklee.edu in that window, and sign in using your OnePass credentials. Once you successfully enter your credentials, you should see the Duo Security Prompt. You can then begin the steps below.
- At the Duo Security Prompt, click Add a new device.
- You'll then be prompted to authenticate. Select your current method and authenticate.
- Select Security Key, then click Continue.
- Make sure that your browser is not blocking pop-ups, then click Continue.
A Note about Steps 5 and 6
Steps 5 and 6 may vary slightly depending on the security key you use. In this example the Yubico YubiKey 5C NFC was used. It may be helpful to refer to this article from Duo if your experience is not the same as what is described in those steps.
- If prompted, allow your browser to use Bluetooth.
- As prompted in the window shown below, connect your security key to your computer and tap the button on your key.
- Once you have successfully added your key, you'll see a listing for it in the My Settings & Devices list within the Duo Security Prompt, tagged as JUST ADDED. It will be named Security key, so you will probably want to rename it. To start that process, click the appropriate blue Device Options button, as shown below.
- Click the Change Device Name button.
- Enter the desired name in the text area, then click the Save button.
- To authenticate with the key, first return to the log in screen and enter your credentials. When you reach the Duo Security Prompt, select your security key from the Device dropdown menu, then click the Use Security Key button.
- As in step 6, when prompted in another window, connect your security key to your computer (it's OK if it's already connected), and tap the button on your key to authenticate.
Setting up Multiple Keys
It is advised, when using a security key for authentication, that you have a backup key in case anything happens to your main key. To set up your backup key for use with Duo, simply follow the steps above once more, using your backup key instead of your main key.
