Using Hardware Tokens with Duo

Hardware tokens are the most basic devices to use for two-factor authentication. A hardware token will need to be administratively assigned to your account. If you are interested in utilizing a hardware token for your second factor, please contact the ITS Service Center (716) 673-3407. 

NOTE: All faculty can be issued an optional hardware token to use as a secondary 2nd factor device for Duo Security. These hardware tokens are provided to the employee at no charge for the first token. The token is NYS property and needs to be returned to the ITS Service Center upon employee separation from service. If the employee loses the hardware token, the employee or department will need to replace it at their expense. Please visit the ITS Service Center located in Thompson Hall to be issued a hardware token.

To authenticate using an OTP hardware token (token with the green push button), click the Enter a Passcode button. Press the button on your hardware token to generate a new passcode, type it into the space provided, and click Log In.

If you have a Yubikey token, click into the passcode entry field and touch the button of your Yubikey (metal circle in the middle) until it generates and submits a passcode.

Using the "Device:" drop-down menu to select your token is not necessary before entering the passcode.

Duo hardware tokens (pictured above) can get "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login. If you get an "Invalid passcode" error message, you can try to login with three different codes in a row and your token will automatically resync to Duo's servers.  Do NOT try to login with the same code or your account might be locked out after multiple attempts.

NOTE: This OTP hardware token with a green button is NOT provided to Fredonia employees anymore and has been replaced by Yubikey 4 token. 

Please contact the ITS Service Center at (716) 673-3407 if your token stops working.

Related articles