Multi-factor Authentication (MFA), Current users who need to enroll their Security Key (Yubikey) in Microsoft MFA
This article will walk through the process of enrolling your Yubikey for use in the Microsoft MFA.
Before you begin, ensure you have:
- A compatible FIDO2 security key, such as a supported YubiKey model. We recommend purchasing a security key from the University of Illinois WebStore.
- Access to a web browser.
- Your login credentials.
- Navigate to aka.ms/mfasetup
- Sign in to your account and follow the prompts.

- You will be redirected to the Duo Universal Prompt. Approve the request using your existing MFA method.

- After authentication, you will be directed to the Security Info screen. Select + Add sign-in method.

- Select Passkey. You will be given information about setting up passkeys using your face, fingerprint, or PIN. Select Next.

- Select Next.

- Select Security Key. Keep your YubiKey inserted and follow the on-screen instructions until the setup is completed successfully.

- Enter your security PIN (minimum 4 digits) and select OK.

- Touch your security key to complete verification. Place your finger over the gold circle with the "Y" in the center.

- Once your touch response is recorded, you will be able to name your Security Key.

When you see the confirmation screen, your security key has been successfully registered. You will also be able to locate your YubiKey as an additional MFA method on the Security Info page.
