Duo USB Token

Using a Duo USB Token

What is a Duo USB Token?

A Duo USB Token is a small USB device that you can use to authenticate with Duo instead of using a mobile phone.  The are the 'thing you have' part of Duo's two-factor authentication system, that goes along with your password as the 'thing you know.'
 
For more information about Duo USB Tokens (also called U2F tokens), see Duo's U2F website.  The tokens we use are manufactured by Yubikey.

How do I get a Duo USB Token?

They are available from Library & Technology Services via the Computing Help Desk.  We have a limited supply and they are primarily for people who do not have a mobile phone.  

Where can I use a Duo USB Token?

Currently, they only work with the latest version of the Chrome web browser on Mac OS X and Windows.  

How do I use a Duo USB Token?

After completing the setup steps below, when you login to Google Apps or Workday, follow these steps:
  1. Plug the token into the computer and make sure the blue light is flashing.
    • If the blue light isn't flashing, unplug the token, turn it upside down and plug it in again.
       
  2. Open Chrome and login to Google Apps or Workday.
     
  3. When prompted to login with Duo, tap the lock icon on the token.
     
  4. Once you have authenticated and can access Google or Workday, you can unplug the token.

How do I setup a Duo USB Token?

First, make sure you have enrolled in Duo on your Wellesley domain account.  Then follow these steps:
  1. Plug in the Duo USB Token into your computer and make sure the token's blue light starts flashing.
    • If you don't see a blue light on the token, unplug it, flip it over, and plug it in again.
       
  2. On Windows computers, it may take a minute for Windows to setup the driver.
    • You will see a gray rectangle icon appear in the notification area and get popups that a device has been detected and a driver is being installed for it.  Wait until this completes before continuing.
       
  3. Opne Chrome on your computer and login at http://mail.wellesley.edu
  4. At the Duo prompt, don’t authenticate when prompted, click Add a new device on the left.
    • If you aren't prompted for Duo, go to File > New Incognito Window, and try again.
    • ​If Duo is set to automatically send a push or call your, in the blue bar click Cancel.
       
  5. Authetnicate with Duo by choosing an authentication method from the list.
     
  6. From the list of devices to add, select U2F token, then click Continue.
     
  7. An Enroll Your U2F Token popup window will appear.
    • When you see the Use U2F token to proceed message, tap your token on the lock logo.

       
  8. You should see a notification that it has been setup and added to your account. 
     
  9. To continue to login, scroll down within this small Duo window to click Continue to Login
     
  10. After authenticating with Duo you can remove the token from your computer, without having to eject the device in Windows or Mac OS X.