Tokens: YubiKeys

The instructions below describes detailed information about tokens for 2FA: YubiKeys tokens.

Instead of using a mobile device for two-factor authentication, a YubiKey can be used instead.

YubiKeys

A YubiKey, shown below, is a personal device assigned to a user which allows them to authenticate with DUO (2 factor authentication). The YubiKeys will need to be plugged into the users device (ex. computer) and will provide a code to enter as their second password when prompted. Most computers interpret the key as a secondary keyboard device.

Open

Who can request a token?

UWaterloo employees with an active Workday record can request a token from IST via this form: https://uwaterloo.atlassian.net/servicedesk/customer/portal/2/group/413/create/1660

Students (undergrad and grad), co-op students, and contract staff, retirees and alumni can purchase a yubikey/U2F (Universal 2nd Factor) on their own via Amazon or another vendor. Once the YubiKey/U2F token has been purchased, they can program it themselves: Duo two-factor authentication overview and instructions | Add a Security Key

Returning Tokens

When a faculty member/staff leaves, they need to return their token. Either return the token to one of the IST Service Desks in DC or DP, or mail it internally to Chao Yang at EC2 2108C.