NCSA Duo

Use NCSA Kerberos Username and Password https://duo.security.ncsa.illinois.edu Use NCSA Kerberos Username and Password

Choose Device Management

We are going to add a FIDO UTF token

Must use compatible browser on local machine

The Light on the blue token will flash while waiting for a tap.

Confirm you see a U2F security key added

Adding another device

Adding Another device – this time a phone

Put in your phone number

Confirm and click continue

Choose platform and continue

Install Duo Mobile on your device

Note you can have more then one Duo “instance” in your app Open Duo Mobile Click + to add Give permission to camera if asked Point at QR code Move phone away from screen if it doesn’t scan at first. Continue should light up Note you can have more then one Duo “instance” in your app

Generating Backup Codes

Save the backup codes somewhere safe. If you choose to put them in NCSA LastPass, don’t also use Duo for LastPpass

Adding a Hardware Token Account must be setup with U2F or Phone before self-adding a hardware token. NCSA can add a token to an account for a user.

Adding a hardware token

Enter the serial number from the back of the token. You can enter or skip the dashes.

Verify that the token ID listed is correct

To test that the token works Logout and back in Then select device management Click Enter Click Enter a Passcode

Momentarily press the green button for the number Type it and click Log In Press the green button for 1 second and then let off, number will display after a short delay

You can remove a token from your account under Device Management

Click trash can

Two Factor Authentication Everywhere Enable it with other vendors: https://twofactorauth.org/ https://help.github.com/en/articles/configuring-two-factor-authentication Example Incident: https://github.blog/2019-05-14-git-ransom-campaign-incident- report/