Yubikey Hardware Device Instructions – Windows

Overview

This guide walks you through the setup, configuration and other methods of manipulating the Yubikey hardware token used in Multi-Factor Authentication for Windows computers.

Technical note: These instructions work for the Yubikeys supplied by the university for those who traded in their Duo token. If you purchase your own key, these instructions work with the newer Yubikey FIDO 2 keys, including the Security Key (C) (NFC), YubiKey 5(C) (NFC), and YubiKey 5(C) (NFC) FIPS. They may generally work for most FIDO 2 devices.

Please contact SalukiTech if you have any questions on purchasing your own Yubikey if you do not have a Duo token to exchange.

Adding a Hardware Token to Your SIU / Microsoft Account

1. Logon to office.siu.edu click your profile and go to ‘My Account’ then ‘Security Info’ or head there directly at https://mysignins.microsoft.com/security-info
2. Click ‘Add sign-in method’ select ‘Security Key’ and click ‘Add’.
3. Select USB (or NFC if you are operating your NFC-capable hardware token via a mobile device)
4. You will now be advised to have you key ready and click ‘Next’
5. Select ‘Security Key’ from the next menu and click ‘Next’.
   
6. You will see your e-mail address listed as logging into login.microsoft.com. If your e-mail address is correct click ‘OK’.
7. Click ‘OK’ at the next screen explaining that information from your security key will be verified to complete this setup.
8. Enter a secure PIN here. This is alphanumeric, meaning you can use letters or number and must be between 4 and 63 characters in length.
   SIU recommends a 6-character password for your Yubikey. This doesn’t have to be overly complex, and should be something you can/will remember. Entering this wrong 8 or more times will reset the device.
9. You will be asked to Touch the security key and/or enter your PIN to confirm.
   
10. You will now see the ‘Passkey saved’ if successfully setup.
    You will be asked to enter a name for this key. This is for your reference only and mostly used for those individuals who have multiple hardware tokens. Click ‘Next’ when done.

    

Removing a Hardware Token from your SIU / Microsoft Account

1. Visit the Security Info Section of your office.siu.edu account or go directly to https://mysignins.microsoft.com/security-info
   
2. Click the ‘Delete’ button next to the device(s) you want to remove.
3. You may be prompted to Sign In to confirm deletion; if not, move on to Step 4.
   [Note: You should have another device setup already to complete this step. If not, please reach out to SalukiTech.]
   
4. Click ‘OK’ to confirm deletion
   

Creating a PIN for a Yubikey / FIDO 2 Device

Note: This is only needed for power users or support staff who wish to view/change their security key PIN.

1. Windows 10 or 11 go to Settings -> Accounts -> Sign-in Options and select ‘Security key’ then click ‘Manage’. You may be prompted to insert and/or touch the security key connected to your device.
   
2. Click ‘Add’.
   
   Note: If this states ‘Change’ or anything other than ‘Add’ please proceed to the ‘Change a PIN for a FIDO 2 Device’ instructions above.
3. Enter a secure PIN here. This is alphanumeric, meaning you can use letters or number and must be between 4 and 63 characters in length.
   SIU recommends a 6-character password for your Yubikey. This doesn’t have to be overly complex, and should be something you can/will remember. Entering this wrong 8 or more times will reset the device.
   
   Note: If you enter less than 4 character (or less than 6 with a FIDO 2 FIPS device) you will be presented with an error like this: