The second slot is used if the button is touched between 2 and 5 seconds. The first slot is used to generate the passcode when the YubiKey is touched for between 0.3 and 1.5 seconds and released. Generate YubiKey ConfigurationĮach YubiKey with OTP support has two slots. Verify your YubiKey's capabilities at the Yubico site. This information applies to YubiKey tokens that support one-time password (OTP) functionality, like the YubiKey 5 series or YubiKey 4 series. If you do not know the current stored secret you can use the YubiKey Manager to reconfigure the YubiKey. To use a YubiKey hardware token you will need to enter its stored secret in your Duo Admin Panel. See the Duo User Guide for examples and instructions for the complete security key user experience with Duo Passwordless, Duo Universal Prompt, and the traditional Duo Prompt. Guide: YubiKey Bio Series Fingerprint Enrollment Users will need to configure the PIN or enroll their finger for use with their YubiKey as instructed by Yubico before trying to set up Duo Passwordless using their YubiKey. Only FIDO2 security keys that support user verification in the form of a PIN or biometric, like the YubiKey 5, YubiKey Security Key, or YubiKey Bio series, work with Duo Passwordless. YubiKeys that support FIDO or FIDO2 standards work as a WebAuthn security key for Duo two-factor authentication in Duo Universal Prompt and traditional Duo Prompt when you enable the "roaming authenticator" authentication method in the effective Duo policy for a given user and application. Duo does not resell YubiKeys.Īrticle: How to select the correct YubiKey YubiKey as a Duo Roaming Authenticator Purchase YubiKeys from Yubico or other major retailers like Amazon. Both WebAuthn/FIDO2 and passcodes - To support both types of authentication methods with one YubiKey you must choose YubiKey 5 or YubiKey 5 FIPS series.Hardware token passcodes - select YubiKeys that support "OATH - HOTP".WebAuthn, roaming authenticator, or security key - select YubiKeys that support "WebAuthn" and "FIDO2".Use the Yubico product comparison charts to determine the right YubiKey to buy for your use case. As an OTP-generating hardware token for any Duo application which supports passcodes for two-factor authentication, including administrator login to the Duo Admin Panel.As a WebAuthn passkey for Duo administrator logins to the Duo Admin Panel.As a two-factor security key used during browser-based authentication featuring Duo's traditional prompt or Universal Prompt.As an authenticator for Duo Passwordless logins.Overviewĭuo supports use of Yubico YubiKeys in a variety of authentication scenarios: You should upgrade your devices to the latest iOS or Android versions.Learn how YubiKeys work with Duo for authentication. You should always run the latest version of DUO Mobile on a supported Operating system to maintain a strong security posture. There will no longer be any troubleshooting done on these versions either. If your Duo application fails or your phone dies, you will not be able to download that same version after February 1, 2020. You will continue to get SMS-delivered passcodes and phone callback authentications verification codes as those do not rely on the Duo Mobile app. You will get the Duo Mobile-generated passcodes delivered via the app. If you have already downloaded the Duo Mobile app on your device with either iOS 11 or Android 7, you will still be able to use it until the application fails. Duo Mobile will continue to be fully supported on iOS 12 and Android 8 and newer.īeginning February 1, 2021, devices running iOS 11 or Android 7 or older will no longer be able to install Duo Mobile from the Apple App Store or the Google Play Store.ĭUO wants to focus their engineering efforts on newer operating systems, ensure security risks are updated, and to allow them to build helpful and secure features. Due to the decreasing use of iOS 11 and Android 7, Duo has decided that after February 1, 2021, they will no longer support their app on these legacy mobile operating systems. These versions are outdated and may pose a security risk. The iOS 11 version was released on September 19, 2017. Android 7 was released on August 22, 2016. Companies decide all the time how long they will support applications running on older systems.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |