Microsoft Yubikey

Audience

Faculty or Staff needing a method to authenticate and not able to use the Microsoft authenticator app.

Task

Enroll YubiKey to Microsoft account

Use YubiKey to authenticate

Prerequisites

Have a YubiKey, CPCC account, and a PC to use

Instructions

Enroll YubiKey

1. Open a web browser (or new tab) and type in myaccount.microsoft.com

Log in with your CPCC email if prompted, you may have to verify via a phone number, which can be a cell phone or a landline (such as deskphone) to be able to get in initially. Select to verify with either text or call. 

Uploaded Image (Thumbnail)

If there is no number attached it will prompt you to set one up. This can later be removed once another security method has been set up. 

2. Once logged in select Update Info under the Security Info block.

Uploaded Image (Thumbnail)

*Troubleshooting Tip: If after clicking Update Info and the screenshot in Step 3 (below) does not come up, please try clearing the cache and cookies.

3. Click Add sign-in method.

Uploaded Image (Thumbnail)

4. Select Security Key in the dropdown list and click Next.

Uploaded Image (Thumbnail)

5. Select USB Device.

Uploaded Image (Thumbnail)

6. Click Next.

Uploaded Image (Thumbnail)

Uploaded Image (Thumbnail)

7. If the Yubikey has already been inserted into the USB port, it will prompt you to set up a PIN. 

Set up a PIN, there does not seem to be a limit as tests have shown a 4-digit and a 6-digit PIN is accepted.

*If it asks for a PIN rather than creating one then that means a PIN has already been set up with the Yubikey, please bring the Yubikey to the ITS Service Desk to have it reset or changed.

Uploaded Image (Thumbnail)

8. It will prompt you to touch the Yubikey, which will also be flashing green.

Uploaded Image (Thumbnail)

9. Another prompt will ask to allow the site to see the Yubikey, select Allow.

Uploaded Image (Thumbnail)

10. Name the security key and click Next.

Uploaded Image (Thumbnail)

11. Yubikey has been set up, click done and you should see it listed in the Security info page.

Uploaded Image (Thumbnail)

 

Using Yubikey

1. Sign in with CPCC email and password, it will prompt to authenticate, choose Use a security key.

Prompts may differ:

Uploaded Image (Thumbnail)

Uploaded Image (Thumbnail)

2. Insert Yubikey if not already in USB port and enter PIN.

Uploaded Image (Thumbnail)

3. Yubikey should be flashing (green), touch the gold circle on Yubikey.

Uploaded Image (Thumbnail)

4. A prompt may show up and ask if you want to stay signed in, select either option that best fits.

Uploaded Image (Thumbnail)

Outcome

YubiKey has been added to MS account and can be used to authenticate logs to MS Office products.

Further Reading

Microsoft Authenticator App