A hardware token is a small key fob device that is used to generate passcodes at the press of a button. The passcodes are used to complete the multi-factor authentication (MFA) process.
DIT doesn't sell Yubikeys. You need to purchase them from a private vendor like Best Buy or Amazon. For more information, see How do I use my security key (YubiKey, Titan Key, etc) with UMD Duo?
The YubiKey must first be added to the Duo Admin Console by an administrator before it can be used. For details, see the Configure YubiKey OTP for Duo article.
if you already have a mobile device enrolled, you can register your token by visiting the UMD Multi-Factor Authentication Profile. Click Manage next to Hardware Tokens, then Register Your Hardware Token. If you are registering your hardware token prior to enrolling a mobile device, visit the Self-Enrollment page.
For further instruction on registering your hardware token, visit How To Register Your Multi-Factor Authentication Hardware Token.
If you need assistance with finding an Duo admin, you may visit the Terrapin Tech FAQ: Where Is Terrapin Tech Located and What Are Its Hours of Operation? located on the ground floor of the Patuxent Building (PTX), near Hornbake Plaza and the Stamp.
You may also contact the Service Desk at 301.405.1500 or submit a ticket with the service desk.
To use your hardware token, you will press a button to generate a passcode that you will use to log into the Duo Authentication Prompt on your computer. If there is a problem with your token, you can call or visit the Service Desk.
For an example of how a hardware token is used, check out Duo's article on Using Duo with a Hardware Token.
The Division of Information Technology (DIT) does not allow you to share your hardware token, as sharing a hardware token will lead to diminished security and effectiveness of the multi-factor authentication process associated with your account.
You only need one hardware token. The hardware tokens are portable and may be carried with you wherever you are working.
If you are no longer employed by the University of Maryland, system access and authorization will be revoked as part of the normal off-boarding procedure. Department staff must collect hardware tokens before separation from the university.
The department should contact the Service Desk Hours and Contact Information at 301.405.1500 to have these tokens removed from your Duo account.
NOTE: Hardware tokens run on a battery and have an expected life span of five years. After they no longer function, total replacement is of the hardware token is necessary.