YubiKey registration for Mac

Summary

Body

Note: A Microsoft passkey is the designated MFA method for faculty, staff, and student employees.

The YubiKey security key is an alternative MFA method for those who are unable to use passkey for multi-factor authentication, such as those without the required phone OS or Bluetooth. After registration, your YubiKey can be used with multiple devices to log into university services. It is recommended that you purchase a second YubiKey as a backup in case your YubiKey is lost or damaged.

Note: These instructions are for Mac computers. Instructions for Windows setup, as well as other YubiKey information, can be found in our YubiKey security key for multi-factor authentication article.

Step 1: Register the YubiKey

Note: If the registration process times out, restart the registration process at “click +Add sign-in method”. Some steps may be skipped if you had already completed them before the time-out.

Insert the YubiKey into your computer.
Go to:
account.uark.edu
In the Security Info pane, click Update Info.
On the Security Info page, click +Add sign-in method.
Add a sign-in method by selecting the Security key or passkey option from the list.
Click Next.
When prompted to sign in, click Other Options.
Click Security Key to choose how you would like to sign in.
You will be prompted to touch your security key. Tap the circle on your YubiKey.
Create a new PIN; type the PIN in the New PIN field.
Confirm your PIN; type your new PIN again in the New PIN field.
Touch the YubiKey to finish the setup.
Return to Step 3 of the YubiKey setup article to complete setup.

Step 2: Sign out of everything

Log into the Security info page.
Note: You might be required to authenticate using the YubiKey.
Click the Sign out everywhere link at the bottom of the page.
Click OK on the "Sign out everywhere?" window.
Click your account in the Pick an account window.

Your account will be signed out of all university resources.

Step 3: Enroll in Required Passkey group

After setting up the YubiKey, you will need to self-enroll in the Required Passkey group.

Log into your Microsoft My Access page.
Note: You might be required to authenticate using the YubiKey.
Click Access packages from the My Access section in the left navigation.
Click View all.
Click Request in the "MFA with Passkey in Microsoft Authenticator" row.
Click Continue in the MFA with Passkey in Microsoft Authenticator window that opens.
In the Additional questions window that opens:
1. Select Yes or No to answer, "Have you registered a Microsoft passkey in Microsoft Authenticator or registered a YubiKey?"
2. Select Yes or No to answer, "For Windows users, have you set up Windows Hello for Business?"
3. Click the Submit Request button.
  The Business Justification field does not need to be completed.
  
  You should see a green pop-up in the upper, left corner that lets you know that your request is being processed.
You will receive an email to your UARK email account with the subject line, "You now have access to MFA with Passkey in Microsoft Authenticator" to let you know that you have successfully enrolled in the Required Passkey group.

Using the YubiKey

Sign-in prompt windows might be different or in a different order than shown here. The prompts that you are given could vary depending on service being logged into.

When multifactor authentication is required for a login, the YubiKey must be plugged into the computer or other device.

Select Sign-in options.
Select Face, fingerprint, PIN, or security key.
You will be prompted to Choose a passkey. Select Security Key.
You will be prompted enter your security key PIN. Enter the PIN that you created during YubiKey registration in the Security Key PIN field, and click OK.
When prompted to Touch your security key, tap the YubiKey that is plugged into your device.