Security Key For Two-Factor Authentication (2FA)


All websites protected by single sign-on, such as Workday, Canvas, and UChicago Box, require that you use two-factor authentication (2FA). You may use a YubiKey token (available for purchase at the ID & Privileges Office) or any security key that is FIDO2 or WebAuthn compatible as your second factor. When you purchase your security key, be sure to choose the key that will fit your device (USB or USB-C).

Register Your Security Key 

If you purchased a Yubikey from the IPO, you may also register it at 2fa.uchicago.edu. Otherwise, you will have to follow the instructions listed below to register your own Yubikey. 

  1. Type in the URL for the website you are trying to reach such as uchicago.box.com.
  2. When prompted, log in with your CNetID and password. You will then be taken to the 2FA login screen.
  3. From the Duo prompt, choose Other Options.
  4. At the bottom of your list of registered devices, choose Manage Devices. You will be asked to authenticate using one of your currently registered devices and will be taken to your registered devices page.
  5. Select Add a Device.
  6. You'll be taken to the Select an Option window. Choose Security key.
  7. You'll then see the Set up security key window. Get your security key out and ready to install in your device. Select Continue when you are ready.
  8. You will then be asked to install your security key in your device and authenticate using the security key by touching the circle, light, or button on your security key.
  9. Duo will register your security key and it will appear on your list of registered devices. 

Authenticate using your security key

  1. Insert your Security key into your device. 
    insert token
  2. Touch the circle, light, or button on your security key.
    touch circle on Yubi token
  3. Your passcode will flash across the passcode box on your screen and you will be connected to the website you are trying to reach.

Tip: For Yubikey access, if you are not using a US standard layout keyboard, you may need to make some modifications to use your Yubikey token for 2FA access. Instructions are available in this article Expanding YubiKey Keyboard Support provided by YubiKey.