USB Security Keys for MFA: Models, Purchasing, and Setup

Overview

A USB security key is a physical device that plugs into your computer to verify your identity when signing in to your University Microsoft 365 account.

MFA is required, but purchasing a security key is not. A key is one available method. You may also be able to verify your identity using your computer or a mobile app.

See About Multi-Factor Authentication to compare available methods before purchasing a key.

Compatible USB Security Keys

Employee accounts require an approved biometric FIDO2 security key, which includes a fingerprint reader.

The following models are approved:

Students

Students can use any FIDO2-certified USB security key. If you are unsure whether a particular model will work, contact the IT Solutions Center before purchasing.

Purchasing

Faculty and staff: Your department must purchase the key using its cost center. Departments may purchase an approved model from a retailer or request one through ITS procurement.

IT Solutions keeps a limited supply on hand for faster fulfillment, subject to availability. The cost is charged to your department. IT Solutions does not fund security keys, consistent with departmental responsibility for employee equipment purchases.

Students: If you choose to use a security key, you must purchase it at your own expense.

Set Up 

Once you have a compatible key, follow the instructions to register your security key with your school or work account. 

Frequently Asked Questions

Does IT Solutions need to register my key for me?

No. You must register the key with your University account, but you can complete that process yourself using the instructions above. IT Solutions can help if needed.

Can I use the same type of key for my student and employee accounts?

An approved employee biometric key may work with both account types, but a key that works with your student account may not meet employee account requirements. Register the key separately with each account.

What if my key is lost, broken, or unavailable?

Use another MFA method you previously added. If your key is lost, remove its registration from your University account Security info when you can access your account. If you cannot sign in, contact the IT Solutions Center directly for help.

What if I cannot use a security key?

Review About Multi-Factor Authentication for other methods, including methods that do not require a phone or separate key.

If an accessibility need or another significant barrier prevents you from using the available methods, submit an MFA exception request. Requests are reviewed individually. If you cannot sign in to submit the form, contact the IT Solutions Center directly.

Still Need Help?

Visit the IT Solutions Center page to view current hours, locations, and contact information.

Keyboards, Mice and Other Input Devices Request Multi-Factor Authentication Assistance Print Article

Related Articles (1)

This article walks new students and employees through setting up multi-factor authentication (MFA) on their University account for the first time. MFA is required to sign in to many services at the University, including Microsoft 365 apps, MavMail, Workday, D2L Brightspace, Kaltura MediaSpace, and more.

Related Services / Offerings (3)

Order input devices for University use.
The Microsoft Authenticator mobile app allows you to quickly authenticate your Microsoft 365 sign-ins using your mobile device.
Request assistance with multi-factor authentication issues.