Multi-factor Authentication (MFA), Current users who need to enroll their Security Key (Yubikey) in Microsoft MFA

This article will walk through the process of enrolling your Yubikey for use in the Microsoft MFA.

Before you begin, ensure you have:

A Security Key (Yubikey) that you purchased, we recommend that you purchase this from the University of Illinois WebStore.
Access to a web browser.
Your login credentials.

Navigate to aka.ms/mfasetup
Sign in to your account and follow the prompts.

Signin page Enter Password Page

3. You will be redirected to the Duo Universal Prompt. Approve the request using your existing MFA method.

4. After authentication, you will be directed to 'Security Info' screen.

Security Info Screen

5. Select "+ Add sign-in method" and select "Security key".

Add a Sign-in Popup for security key option circled

6. The next pop-up asked for you to choose between a USB Device and an NFC Device, we recommend that you select a USB Device.

USB or NFC Device question

7. The next pop-up gives you instructions on next steps for enrolling your Yubikey. Click "Next".

Security Key Next instructions.

8. Once you plug in your Yubikey and select next, you will see this pop-up screen.

Device redirect to a new window for finishing security key set up

9. The next pop up explains that this set up will be for your microsoft.com logins specifically for your netid@illinois.edu account. Click "OK" and "Next".

Security Key Set up prompt 1

10. This pop-up screen gives more information about how the security key will work with your login credentials. Click "OK" and "Next".

Continue Set up Pop up for security keys

11. Set up a PIN ( Minimum of 4 digits).

Set up PIN for the Security Key

12. Once you set up your pin, touch your security key to complete verification. You will need to put your finger over the Gold Circle with the "y" in the center.

Touch your security key screen.