Question

How do I enroll a SecureKey (YubiKey) for use with Okta and two step authentication?

Answer

You'll first need to purchase a YubiKey.  For information on supported models see KB0017223.

Note: At this time there are some services which will not work with a SecureKey, so we recommend at least one alternative option be enrolled as well. See this article for additional details.

1. Login to Okta by visiting okta.nd.edu and enter your NetID and password.
2. Click on your name in the upper-right corner, then Settings.
   
   
   1. If there is a green button that says Edit Profile, click on it
      
   2. You will be prompted for your password.
      
3. Locate the Security Methods panel and the option for Security Key (U2F)
   
   
   
4. Click the Set up button beside Security Key or Biometric
5. Enter your password and respond to two-step if prompted to do so
6. At the Set up security methods screen click Set up
   
   
7. If you haven't already done so, insert the SecureKey in the appropriate USB port on your computer.
8. Read the on-screen instructions and click Set up.
   
9. Depending on your operating system, you may see several security messages which you'll need to respond to
10. When prompted, tap the gold button or the exposed gold edge of the SecureKey.
    
    
    
11. When you are returned to the Okta enrollment screen the SecureKey is now registered to your account.