YubiKey is a hardware device that supports the Universal Two Factor (U2F) protocol. They are physical devices that can be added to your Duo account and many other accounts that support U2F as either a primary or backup method of approving a Duo TFA authentication requests. Instead of receiving a text message, phone call, or Duo Push, you can instead use a YubiKey.
Some Yubikeys are designed to be carried on a keychain while others are designed to be left plugged into your computer's USB port. Today, most browsers support YubiKey.
Where can I get a YubiKey?
YubiKeys are available at the Kenyon College Bookstore for purchase. For short-term scenarios (in case you lose your phone, for instance), employees and students may check one out at Circulation in the library. Finally, other YubiKey formats are available for purchase directly from Yubico.How do I add a YubiKey to my accounts?
YubiKey enrollment is simple and fully self-service. To begin, access a service protected by Duo. If you're off campus, remote.kenyon.edu is a great option. For on-campus, use mybanner.kenyon.edu.Enter your Kenyon username and password as prompted. At the Duo prompt, click "Add a new device".
To proceed, you'll need to authorize a Duo request. Choose your preferred method to be taken to the device self-service page. For YubiKey, choose "U2F token" and click "Continue".
To complete enrollment, a pop-up window should appear with instructions. Insert the YubiKey into a USB port on your computer as instructed and touch the flashing key symbol.
When successful, this completes the enrollment process! You will be shown your list of registered devices which will now include the U2F token. You can begin using your U2F token from this point.