YubiKey security key for multifactor authentication - Mac

Note: A Microsoft passkey is the designated MFA method for faculty, staff, and student employees. 

The YubiKey security key is an alternative MFA method for those who are unable to use passkey for multi-factor authentication, such as those without the required phone OS or Bluetooth. After registration, your YubiKey can be used with multiple devices to log into university services. It is recommended that you purchase a second YubiKey as a backup in case your YubiKey is lost or damaged. 

Note: These instructions are for Mac computers. Instructions for Windows setup, as well as other YubiKey information, can be found in our YubiKey security key for multi-factor authentication article. 

Step 1: Request a YubiKey

Use the YubiKey Request form to request a YubiKey.

Step 2: Register the YubiKey 

Note: If the registration process times out, restart the registration process at “click +Add sign-in method”. Some steps may be skipped if you had already completed them before the time-out.

  1. Insert the YubiKey into your computer.
     
  2. Go to: 
    account.uark.edu
     
  3. In the Security Info pane, click Update Info.
     
  4. On the Security Info page, click +Add sign-in method.

    Security info window with Add sign-in method link selected
     
  5. Add a sign-in method by selecting the Security key or passkey option from the list.

    screenshot of Add a sign-in method prompt with Security key or passkey selected
     
  6. Click Next.

    Click Next
     
  7. When prompted to sign in, click Other Options.

    Choose Other Options link at bottom of window
     
  8. Click Security Key to choose how you would like to sign in.

    Select Security key
     
  9. You will be prompted to touch your security key. Tap the circle on your YubiKey.

    Set up security key window
     
  10. Create a new PIN; type the PIN in the New PIN field.

    Enter the new PIN you want to unlock your security key.
     
  11. Confirm your PIN; type your new PIN again in the New PIN field.

    Confirm the new PIN you want to unlock your security key.
     
  12. Touch the YubiKey to finish the setup.

Step 4: Sign out of everything

You must sign out of everything to prevent issues when enrolling in the MFA with Passkey security group.

Step 5: Enroll in MFA with Passkey in Microsoft Authenticator group

After setting up the YubiKey, you will need to self-enroll in the Required Passkey group. 

Instructions for enrolling in the MFA with Passkey in Microsoft Authenticator group

Using the YubiKey

Sign-in prompt windows might be different or in a different order than shown here. The prompts that you are given could vary depending on service being logged into. 

When multifactor authentication is required for a login, the YubiKey must be plugged into the computer or other device.

  1. Select Sign-in options.

    screenshot - Sign in window with Sign-in options button indicated
     
  2. Select Face, fingerprint, PIN, or security key.

    screenshot - sign-in options with Face, fingerprint, PIN or security key selected
     
  3. You will be prompted to Choose a passkey. Select Security Key.

    screenshot of Choose a passkey prompt with Security key indicated
     
  4. You will be prompted enter your security key PIN. Enter the PIN that you created during YubiKey registration in the Security Key PIN field, and click OK.

    screenshot - Sign in with a passkey prompt - Enter your security key PIN
     
  5. When prompted to Touch your security key, tap the YubiKey that is plugged into your device.

    screenshot - Sign in with a passkey - Touch your security key

After touching the YubiKey, you will be authenticated and logged into the system.

Print Article

Related Articles (2)

The purpose of this policy is to provide guidelines for MFA connections to the University of Arkansas network and information systems on and off campus.
The YubiKey security key is an alternative method for multi-factor authentication.