RamID+ Duo - How to Two-Factor Authenticate without a Phone

Summary

The article summarizes alternative options for tokens that can be used for MFA.

Body

 

Purpose:

For those users that do not have a cell phone or are unable to use the Duo Mobile App to receive push notifications, RamID+ powered by Duo supports the use of U2F (Universal 2nd Factor) Hardware Tokens for two-factor authentication.

Getting Started:

U2F (Universal 2nd Factor) Hardware Tokens

A U2F Token is a piece of hardware (looks like a USB drive) that can clip on a keychain. When using Duo, instead of receiving a push notification, or text message, a user can plug in the U2F Token and tap the button on it to authenticate their login attempt.

Users are not required to have a U2F Token, and most will not want (or need) a token.  However, there are a few benefits to using a hardware token:

  • Use of a hardware token does not require cellular or Internet service on your phone.
  • Use of a hardware token does not require a Smartphone or the Duo Mobile App.
A U2F Token is a piece of hardware (looks like a USB drive) that can clip on a keychain. When using Duo, instead of receiving a push notification, or text message, a user can plug in the U2F Token and tap the button on it to authenticate their login attempt.

Users are not required to have a U2F Token, and most will not want (or need) a token.  However, there are a few benefits to using a hardware token:

  • Use of a hardware token does not require cellular or Internet service on your phone.
  • Use of a hardware token does not require a Smartphone or the Duo Mobile App.

I already have a hardware token, can I use it with RamID+ Duo?

Yes.  Duo also works with third-party security keys, such as Yubico or Feitian.  See hardware token requirements below.  

Hardware Token Requirements

To use a hardware token with Duo, make sure you have the following:

  • A supported browser (Chrome 70 or later, Firefox 60 or later, or Opera 40 or later).
  • An available USB port.
  • A supported security key. WebAuthn/FIDO2 security keys from Yubico or Feitian are good options. U2F-only security keys (like the Yubikey NEO-n) can’t be used with Firefox.

Where can U2F Hardware Tokens be obtained?

U2F tokens are available for purchase at but not limited to the yubico store or the Feitian store and can be used for personal and business use.

How do I enroll a Hardware Token?

To enroll your hardware token, reference this KnowledgeBase article for setup instructions.  Or, contact OIT Technical Support Services for enrollment assistance - RAMTech Support  - Campus Location: Hill Hall 119 (open Monday-Friday, 9 a.m.-4 p.m.; Walk-in Service must call ahead of time.).

Report a Lost or Stolen Token or YubiKey?

If you lose your hardware token or YubiKey or suspect it has been stolen, please report it to OIT Technical Support Services (TSS) - RAMTech Support - (336) 750-3431.  TSS staff will mark the serial number as missing to prevent others from using it at WSSU. 

 

Additional Resources

Watch the following YouTube video to learn more about using U2F Hardware Tokens

Have Questions?

Please contact the Technical Support Services (TSS) team via RAMTech or by phone, 336-750-3431, with any questions about enrolling or using Duo.

Details

Details

Article ID: 137361
Created
Mon 8/30/21 2:43 PM
Modified
Tue 6/21/22 4:43 PM