Multi-factor Authentication (MFA), Current users who need to enroll their Security Key (Yubikey) in Microsoft MFA

This article will walk through the process of enrolling your Yubikey for use in the Microsoft MFA.

Before you begin, ensure you have:

  • A compatible FIDO2 security key, such as a supported YubiKey model. We recommend purchasing a security key from the University of Illinois WebStore.
  • Access to a web browser.
  • Your login credentials.
  1. Navigate to aka.ms/mfasetup
  2. Sign in to your account and follow the prompts.

    Login page Select password

  3. You will be redirected to the Duo Universal Prompt. Approve the request using your existing MFA method.

    Duo Redirect Duo Push Screen

  4. After authentication, you will be directed to the Security Info screen. Select + Add sign-in method.

  5. Select Passkey. You will be given information about setting up passkeys using your face, fingerprint, or PIN. Select Next.

  6. Select Next.

    Sign in faster with your face

  7. Select Security Key. Keep your YubiKey inserted and follow the on-screen instructions until the setup is completed successfully.

    Where to save your passkey Save your passkey

  8. Enter your security PIN (minimum 4 digits) and select OK.

  9. Touch your security key to complete verification. Place your finger over the gold circle with the "Y" in the center.

  10. Once your touch response is recorded, you will be able to name your Security Key.

When you see the confirmation screen, your security key has been successfully registered. You will also be able to locate your YubiKey as an additional MFA method on the Security Info page.



Keywords:
MFA, Multi-factor authentication, Security Key, Hardware security key, YubiKey, Microsoft MFA, Sign-in method, DUO Mobile, Yubikey setup 
Doc ID:
154310
Owned by:
Identity and Access Management G. in University of Illinois Technology Services
Created:
2025-08-21
Updated:
2026-10-20
Sites:
University of Illinois Technology Services