About hardware tokens for Duo

Introduction

This article contains information about hardware tokens used to log in with Duo.

Information

Where can I get a hardware token? Is there a cost?

The first two hardware tokens are available free of charge to members of the UO community with personal Duck ID accounts.

Lost, stolen or broken tokens will incur a cost if two free tokens have already been received. Any token beyond the second will have a $20.00 USD charge associated with it.

Duo Token Pickup Locations:

  • Technology Service Desk - EMU42
  • Academic North Equipment Desk - LA124
  • Academic South Help Desk - LIB
  • Academic Central Help Desk - LAW
  • Portland Campus - White Stag

What is a hardware token?

A hardware token — also known as a security key or token — is a small device that can provide a second method of authentication for two-step login. Hardware tokens may be in the form of a USB device, key fob, or smart card.

As an example, if you receive a token from UO, it will look like one of these:

How do I use a hardware token?

Tokens provided by UO feature a button on the front side. To use these tokens, press the button to make a passcode appear.

You can login with Duo by clicking the "Enter a Passcode" option and then typing in the code displayed on your token.

To use other types of tokens, follow manufacturer instructions.

What hardware tokens are supported?

Tokens provided by UO:

  • Duo's D-100 Digipass GO6 hardware tokens 
  • Feitian's OTP c100 hardware tokens 

Tokens purchased through your department or on your own:

  • YubiKeys by Yubico
  • Other HOTP hardware tokens (note: only registrable if you can provide required values from your token)

What do I do if my token stops working?

If the token is displaying codes but they are not working when entered:

  1. Make sure your account is not currently locked out in Duo
  2. Generate 3 consecutive codes from the token
  3. Enter the codes in the order they were generated into the Passcode option when signing into Duo
    • This should be done within a 5 minute window
    • No other codes should be entered in-between entering the 3 codes generated by the token
  4. The third code entered should work and the codes from the token should be re-synced and work again in the future.

If the token is not displaying codes at all

Details

Article ID: 106266
Created
Mon 4/27/20 6:05 PM
Modified
Fri 8/26/22 11:00 AM