What are 2FA hardware tokens?

Hardware tokens are small, portable devices that you can use to log into UI Verify, the university's 2-factor authentication system. Most people are able to log into UI Verify using their personal cell phone with either SMS text messaging or via the Duo app. But if you cannot or do not want to use your personal device for 2FA, then a hardware token purchased from WebStore is recommended.
 

Obtaining a Hardware Token

Only tokens purchased through the University of Illinois WebStore will work as a second factor.  They are set up with the private identity and secret key for the University's 2FA service.  The University has a tightly-controlled provisioning process to meet the University's security needs.

While any staff or faculty member can purchase a token through the University of Illinois WebStore, you may want to check with your manager or department lead on the process for providing tokens to its employees. Upon purchase, tokens can be delivered via campus mail or USPS at no charge. Tokens can only be used with University resources. Unit purchases are considered the property of the University and token use must comply with all appropriate policies.

 

Hardware Token Options

There are currently three hardware token options available for UI Verify.

Token Type Yubikey(USB-A) Yubikey(USB-C) OTP C100
Product Image  image of the yubikey token. device that fits in the usb of your computer and has a gold button to generate the passcode.  Yubikey USB-C device C100 token example 
Description A small USB device that you insert into your computer.  You press a button on the token to generate and automatically enter a passcode into the UI Verify screen.

The Yubikey is the preferred option in terms of accessibility, particularly for those visually impaired.

User will need access to the USB device in order to authenticate.  If it is not within reach, the OTP C100 would be a better option.
A small USB device that you insert into your computer.  You press a button on the side of  the token to generate and automatically enter a passcode into the UI Verify screen.

The Yubikey is the preferred option in terms of accessibility, particularly for those visually impaired. 

User will need access to the USB device in order to authenticate.  If it is not within reach, the OTP C100 would be a better option. 
A small electronic device that can be attached to a keyring.  It has a single button that you press to generate a passcode that you then manually enter into the UI Verify screen when prompted.
Dimensions  18mm x 45mm x 3.3mm  12.5mm x 29.5 mm   29mm x 62mm x 11mm
Weight  3.0g  2.0g  14.4g
Price  $45 @ University of Illinois WebStore  $45 @ University of Illinois WebStore  $13 @ University of Illinois WebStore
Requirements  Any computing device with a USB-A port  Any computing device with a USB-C port  No hardware requirements

 

Registering your hardware token for use

  1. Visit the NetID Center at https://identity.uillinois.edu
  2. Click Login and login with your NetID and password then authenticate with 2FA if applicable
  3. Click Manage my 2FA
  4. Click + Add a new device
  5. Click Hardware Token
  6. Type in the serial number of your device which can be found on the back of the hardware token.  For the Yubikey, you can also find the serial number in your WebStore account (Log into WebStore with your NetID, under Order History select your order number.  The serial number will be listed under the Installation Key/Code).
  7. Click Continue
  8. Confirm Token
    • For Yubikey:
      • Insert the Yubikey in the USB port of your computer with the gold button facing up. It will take a few seconds to register the first time.  Press the gold button on the Yubikey (either on top for USB-A or side for USB-C) and it will generate the passcode and log you in. Make sure CAPS LOCK is off when registering a Yubikey.
    • For OTP C100:
      • Press the red button on your token.  It will generate and display 6-digit code.  Manually enter this code into the box and select Enter.
  9. Your hardware token is now ready for everyday use with UI Verify.

Using your hardware token to log into UI Verify

Tokens can only be configured for individual use and cannot be shared/used by a group.  When prompted to log in at the UI Verify screen, here is how to use your token:
  • For Yubikey:
    • Insert the Yubikey in the USB port of your computer with the gold button facing up.  Press the gold button (either on top for USB-A or side for USB-C) on the Yubikey and it will generate the passcode and log you in.
  • For OTP C100:
    • Press the red button on your token.  It will generate and display 6-digit code.  Manually enter this code on the authentication screen.

Forgotten hardware tokens

If you forgot your token and cannot log into the system requiring 2FA, visit NetID Center - Get temporary passcode at the bottom of the page.

Registering a hardware token to another employee

Tokens can be reassigned for use by another employee.  The new owner of the token can register it to themselves by following the instructions in Registering your hardware token for use listed above.

Token Errors

If your yubikey is not authenticating, make sure that CAPS LOCK is turned off and try again.  If still an issue, please proceed with the below steps:
  • If your token is not generating a code or is not registering properly, please report a problem and we can troubleshoot the issue or exchange your token.
     
  • If you work remotely and can not come to campus, please call the Service Desk for assistance: (312) 413-0003 option 9

Details

Article ID: 810
Created
Fri 1/15/21 6:09 PM
Modified
Fri 2/19/21 8:13 PM