MFA SECONDARY ENROLLMENT: Enrolling a YubiKey Security Key as a Secondary Authentication Method

You can configure a YubiKey as a security token that can be used for multi-factor authentication. You may have up to 10 keys registered with your account. NOTE: These instructions assume that you have previously enrolled a primary/initial method. If you have not yet enrolled another method, these are NOT the correct instructions and will not work for you.

YubiKeys can be purchased at software.psu.edu

  1. Go to https://accounts.psu.edu/manage/mfa
  2. Scroll down and click the blue Manage My Devices button

         Picture1.png

  1. Click the + Add sign-in method

         Yuki2.png

  1. From the drop-down menu, select Security Key and click Add

         Yubi3.png

  1. In the Security key window, click Next (NOTE: If you have already completed 2FA, you may not see this window…skip to the next step)

         Yubi4.png

  1. Click the USB device

         Yubi6.png

  1. Insert your YubiKey into an easily accessible USB port on your computer and click Next

         Yubi7.png

  1. You will briefly see this window

         Yubi8.png

  1. Click the Try Another Way

         Yubi9.png

  1. Click the External security key or built in sensor

         Yubi10.png

  1. Click OK

         Yubi11.png

  1. Click OK again

         Yubi12.png

If not already insert, insert your YubiKey into an easily accessible port on your computer and then touch the sensor

        Yubi13.png

  1. Enter a PIN that you will use with your YubiKey and click OK

         Yubi14.png

  1. Touch the sensor on your YubiKey

         Yubi15.png

  1. Enter a name for your key and click Next

          Yubi16.png

  1. Click Done

         Yubi17.png

  1. You should now see the Security Token as an authentication method

         Yubi18.png

  1. If you would like the security key to be your default authentication method, click the Change link beside the words Default sign-in method (located above the + Add Sign in Method button)
  2. Select the App based authentication or hardware token – code option from the drop-down menu and click Confirm

         Yubi19.png