Adding your Yubico Key to Brockport Multi-Factor Authentication (MFA)

What is a Yubico Key?

A Yubico Key is the BITS supported USB Hardware token that is used for Multi-factor Authentication (MFA). USB hardware tokens generate a unique code that is released only when you correctly enter your username and password then physically touch the device. Hardware tokens are considered the easiest to use and most secure MFA method.

Purchasing a Yubico Key

1. Check your computer's ports to select the correct connector.

2. Purchase your Compatible Yubico Key using the links below
   1. USB-A
   2. USB-C

Setup your key

1. Open a browser and go to : https://myprofile.microsoft.com/
2. Login with your Brockport email address, password, and current MFA method. 
3. On the left, click Security info.
4. Click Add method.
5. From the drop-down menu clickSecurity Key.
6.  Click Next to setup your security key.
7. If you see a message with a QR code click "Use a different device" and choose the option with "external security key".
8. In this example we're setting up the Yubico as an USB device.
9. Click Next. 
10. Insert your Yubico key into your computer via USB :
11. You will need to setup your PIN (6 character minimum). This should be only known by you and not easily guessed. 
12. Next, you can now release the key information by pressing the button on the key. 
13. Name your key in M365.
14. You should now see your Security Key has been added as an authentication method.

Signing in with your key

1. The Security key cannot be your default MFA device, but when you log into M365 click "Other ways to sign in"
2. Click "Use Windows Hello or a security key".
3. Once prompted, touch your Yubico key to finish signing in. 

Still Need Help?

If you need further assistance, please submit a ticket here I Need Help, or call the IT Service Desk at  (585) 395-5151 Option 1