This page shows you how to setup a YubiKey security key with your user account, allowing you to perform two-factor authentication using a security key.

Note that using a mobile phone with the "Microsoft Authenticator" app is the IT department's recommended method for two-factor authentication. A security key will mainly be of interest if you don't want to use your mobile phone, or want an alternative login method in addition to a mobile phone.

Norsk versjon - Bruke sikkerhetsnøkkel til tofaktorautentisering

Topic page about IT services | Pages labeled with two-factor

Before you begin

• Before you begin, you must have acquired your own security key. It can be bought in NTNU's online store. Consult your manager before ordering. The cost must be covered by your department.

Add security key to two-factor authentication method

Once you have been informed that two-factor authentication is about to be activated for your user, it is a good idea to make everything ready for the day it is introduced. To complete the setup, you will need a computer and a security key.

If you have already enabled two-factor authentication and would like to use a security key as an alternative method, go directly to the Security key as an alternative method section.

1. Open a browser and go to https://aka.ms/setupmfa.
2. Select the account you want to prepare for two-factor authentication. If you see the dialog box below, log in with your NTNU account.
   
3. Then log in with FEIDE.
4. Click Add sign-in method
5. Choose Security key, click Add.
6. Click USB device.
7. Follow the instructions on screen.
   
8. Insert you YubiKey.
9. Click Save another way.
10. Click Use an external security key.
11. Click OK.
12. Click OK.
13. Enter a pin code.
    
14. Follow the instructions on screen.
    
15. Name your security key, e.g. YubiKey.

How to log on to FEIDE with a security key

1. When logging on to FEIDE using your a security key you click Sign-in options.
   
2. Click Face, fingerprint, PIN or security key.
3. Click Windows Hello or external security key.
4. Click Security key.
5. Enter pin code.
6. Follow the instructions on screen.
   

How to reset your security key to factory default

You will need your security key, Yubico Athenticator program, administrator privileges on your PC (apply here).

Yubico Authenticator is installed with Software Center on NTNU administrered PC's, or https://www.yubico.com/products/yubico-authenticator/ on your ovn Windows, Linux or Mac.

1. When you have recived confirmation your have administrator privileges run Make me Admin. Start-menu, search Make me Admin.
2. Start Yubico Authenticator. Start-menu, search for Yubico, click Run as administrator.
   
3. Click menu, YubiKey.
   
4. Click the arrow > to the right of Configuration, WebAuthn.
   
5. Click Reset.
6. Follow the instructions on the screen, remove YubiKey from USB port.
7. Insert the YubiKey in the USB port.
8. Touch your security key with your finger.

Contact

Orakel Support Services can help you if you have questions or encounter difficulties.