Tokens: YubiKeys

The instructions below describes detailed information about tokens for 2FA: YubiKey tokens.

Instead of using a mobile device for two-factor authentication, a YubiKey can be used instead.

YubiKeys

A YubiKey, shown below, is a personal device assigned to a user which allows them to authenticate with DUO (two-factor authentication). The YubiKeys will need to be plugged into the users device (e.g., a computer) and will provide a code to enter when prompted. Most computers interpret the key as a secondary keyboard device.

Who can request a token?

UWaterloo employees with an active Workday record can request a token from IST via this form: https://uwaterloo.atlassian.net/servicedesk/customer/portal/2/group/413/create/1660

Students (undergrad and grad), co-op students, and contract staff, retirees and alumni can purchase a yubikey/U2F (Universal 2nd Factor) on their own via Amazon or another vendor. Once the YubiKey/U2F token has been purchased, they can program it themselves: https://uwaterloo.atlassian.net/wiki/spaces/ISTKB/pages/44254036030.

Which YubiKey is the right fit for you?

IST provides employees with one

• Yubikey USB-A standard

• Yubikey USB-C standard

• Yubikey USB-A micro

• Yubikey USB-C micro

Open

Consider the following to request which YubiKey is right for you.

• The USB port on your computer is ? Please see image below for reference:

  • USB-A

  • USB-C

  • You have both port types: a USB port will be taken up by the YubiKey, so consider where it will go. Will it be accessible for you to use?

Open

• Do you use the same computer all the time?

  • Yes

  • No: a standard size is better as you can easily take it out or add it to a key loop for portability

• Is your computer a laptop?

  • Yes: you may want a micro size for portability as the standard sticks out and can be damaged

  • No

Returning Tokens

When a faculty member/staff leaves, they need to return their token. Either return the token to one of the IST Service Desks in DC or DP, or mail it internally to Chao Yang at EC2 2108C.