ITS

Setting Up YubiKey as Two-Factor Authentication

Updated on

This guide is intended for employees or students who need to use Microsoft 365 and/or ITSvpn but do not have a mobile phone that supports the Microsoft Authenticator app.

If you, as an employee or student at ITS, cannot use Microsoft Authenticator for two-factor authentication, you can instead set up a YubiKey. This guide explains what a YubiKey is, how to obtain one, and how to set it up in the ITS context.

What is YubiKey?

A YubiKey is a digital security key that functions as a two-factor authentication method. When you insert the key into your computer (USB port) and are asked for two-factor authentication, you need to press the YubiKey, enter the code for it, and you will then be authenticated with two-factor authentication.

Thus, a YubiKey can be used instead of, for example, the Microsoft Authenticator app on your phone.

Expand or collapse content How to Obtain a YubiKey

You can purchase a YubiKey from several suppliers - for example, through Dustin.

Depending on the connection options you have on your computer (USB or USB-C), the following YubiKeys are recommended:

Once you have obtained a YubiKey, you need to contact IT support to set it up as an authentication method.

IT support will need the following information from you, in addition to the fact that it is for setting up a two-factor profile with YubiKey:

  • Your full name
  • User ID of the M365 account that needs to have YubiKey set up

You need to arrange with IT support when the setup should take place and whether you need help with the setup.

If you are setting it up yourself, you will receive a temporary code (so-called "passkey") on your school email. This must be used to set up the YubiKey.

The passkey is only valid for 8 hours from the time specified in the email. If it turns out you help setting up the YubiKey, you must contact IT support before the code expires.

Expand or collapse content Opsætning af YubiKey
  1. Open a private window in your browser (Microsoft Edge, Chrome, Safari, or similar).
  1. Log in to https://portal.office.com/ with your ITS M365 login + personal password, and approve with the sent passkey.
  2. Then insert the link https://aka.ms/mysecurityinfo in the same browser.
  3. Select Add sign-in method.
  1. Select "Security key".
  1. Select "USB device" and have the YubiKey ready.
  1. Insert the YubiKey into the computer and select "Next".
  1. Select "Try another device" to set up a security key.
  1. Select "External security key".
  1. The YubiKey is now ready to be set up. Ensure that the ITS M365 login of the account appears in the box.
  2. Select "OK" if the information is correct.
  1. Continue the installation by selecting "OK".
  1. You now need to choose a PIN for your YubiKey. This PIN will henceforth belong to the ITS M365 login you are setting up the YubiKey for.
    • The PIN must be at least six (6) characters.
    • It is possible to use both numbers and letters in the PIN for the security key.
  2. Select "OK".
  1. Continue setting up the security key.
  1. Continue the installation by selecting "OK".
  1. Enter the PIN you created earlier.
  2. Select "OK".
  1. Place a finger on your YubiKey.
  1. Now name your YubiKey - for example, with employee initials or username.
  2. Select "Next".
  1. Your YubiKey is now set up and can be used as two-factor authentication. Complete the setup with "Done".
Forrige Vejledning Setting Up Two-Factor Authentication - Short Version

ITS er et IT-fællesskab blandt skoler i Midt- og Nordjylland med base i landets tredje største uddannelsesinstitution VIA.
ITS leverer en bred vifte af de it-ydelser til skolerne.
De enkelte skoler udarbejder selv vejledninger, men på dette site findes en række vejledninger fra ITS.
Evt. kommentarer eller spørgsmål til vejledningerne kan rettes til skolens lokale IT-supporter.

Andre vejledninger

 Print Vejledning