Set Up Multi-Factor Authentication (MFA) - Register Your YubiKey Physical Security Key

password security reset authentication two-factor two-way mfa sspr yubikey yubi key

Issue/Question

How do I set up the Macomb Community College provided Yubikey for multi-factor authentication?

Environment

Multi-Factor Authentication

Additional Details

If you prefer to not use your personal mobile device to download and configure the Microsoft Authenticator app, or do not have cellular or Wi-Fi service, this would be the best solution.

You will be required to have at least one other MFA method registered to your account so you don’t get locked out of your account in the event your YubiKey gets lost or stolen.

Note: Physical security keys will not work for virtual environments.

WHAT IS A PHYSICAL SECURITY KEY?
The YubiKey is a hardware authentication device that protects access to computers, networks, and online services. It allows users to securely log into their accounts instead of using an app, call, or text. Like other MFA methods, it helps protect against phishing, eliminates account takeovers, and enables compliance requirements for strong authentication.

HOW DOES A PHYSICAL SECURITY KEY WORK?
The current YubiKey offered is capable of both USB-C and NFC.

For USB-C use: Simply plug in your YubiKey to your device’s USB-C drive and gently tap the Y on the key.
For Near-Field Communication (NFC) use: Tap the YubiKey to the NFC radio on your device.

For more information on NFC, refer to our YubiKey FAQ.

HOW TO REQUEST A PHYSICAL SECURITY KEY

If you already have a YubiKey, you may associate it with your account by using the steps within the Details section of this article.

If you would like to request a YubiKey be provided by Macomb Community College for free, you must submit a request to IT. You can click this link to take you to the service request page, or search “Request Physical Token for Multi-Factor Authentication (MFA)” in our Client Portal.

You will be able to register the YubiKey to your account once you pick it up and have it in front of you.

IMPORTANT: Do not proceed until you physically have your YubiKey in front of you AND have registered at least one other method of MFA.

Details

Note: These directions are typical for most users, but your experience might differ slightly. Please contact the Service Desk if you need any assistance with MFA or SSPR registration.

Open a web browser and use the URL search bar to enter https://mysignins.microsoft.com/security-info from your laptop or desktop.
On the sign-in page, enter your Macomb Community College email address, then click the 'Next' button.

When prompted to enter your password, enter the password you made for your Macomb Community College account, then click the 'Sign in' button.
- Note: If prompted to stay signed in, click the 'No' button.

On the 'Security Info' page, click the '+ Add method' button towards the top of the page.

In the 'Add a sign-in method' pop-up that appears, select the 'Passkey' option from the list of available options.

On the 'Sign-in faster with your face, fingerprint, or PIN'' pop-up, click the 'Next' button.

On the 'Set up Windows Hello to save your passkey' pop-up, click the 'try using another device' link.

On the Windows Security 'Save your passkey' pop-up, and when prompted to 'Insert your security key into the USB port', insert the YubiKey into the USB-C port on the computer being used to complete this process.

Note: For reference, the USB-C port on a computer looks like the following:

Next, when prompted to create a PIN, create a numeric PIN between 6-8 characters and enter it into the 'New Security Key PIN' and 'Confirm Security Key PIN' text boxes.
When finished, click the 'OK' button.

Note: You are responsible for knowing your PIN. The IT department cannot find it for you or reset it.

After creating a PIN, a new prompt will appear to 'touch your security key'

When prompted to 'touch you security key', touch the middle portion of the YubiKey with the flashing y icon.

After touching the YubiKey, and when prompted to name the passkey, create a name for it, then click the 'Next' button.

Note: It is recommended to name the key as the following: YubiKey - ## ### ###. The eight-digit number can be found on the back of the YubiKey. This identifier may be able to help you if your YubiKey is lost or stolen.