MFA SECONDARY ENROLLMENT: Enrolling a YubiKey Security Key as a Secondary Authentication Method

You can configure a YubiKey as a security token that can be used for multi-factor authentication. You may have up to 10 keys registered with your account. NOTE: These instructions assume that you have previously enrolled a primary/initial method. If you have not yet enrolled another method, these are NOT the correct instructions and will not work for you.

YubiKeys can be purchased at software.psu.edu

  1. Go to https://accounts.psu.edu/manage/mfa
  2. Scroll down and click the blue Manage My Devices button

        

  1. Click the + Add sign-in method

        

  1. From the drop-down menu, select Security Key and click Add

        

  1. In the Security key window, click Next (NOTE: If you have already completed 2FA, you may not see this window…skip to the next step)

        

  1. Click the USB device

        

  1. Insert your YubiKey into an easily accessible USB port on your computer and click Next

        

  1. You will briefly see this window

        

  1. Click the Try Another Way

        

  1. Click the External security key or built in sensor

        

  1. Click OK

        

  1. Click OK again

        

If not already insert, insert your YubiKey into an easily accessible port on your computer and then touch the sensor

       

  1. Enter a PIN that you will use with your YubiKey and click OK

        

  1. Touch the sensor on your YubiKey

        

  1. Enter a name for your key and click Next

         

  1. Click Done

        

  1. You should now see the Security Token as an authentication method

        

  1. If you would like the security key to be your default authentication method, click the Change link beside the words Default sign-in method (located above the + Add Sign in Method button)
  2. Select the App based authentication or hardware token – code option from the drop-down menu and click Confirm