Setting Up USB Security Keys for MFA

Set up a USB security key for MFA on your Microsoft 365 account. This guide covers configuring the key on Windows, registering it with Microsoft, and using it for secure sign-in.

Overview

 Learn how to set up and register a USB security key as a multi-factor authentication (MFA) method for your Minnesota State Microsoft 365 account. This guide explains how to configure a compatible security key on a Windows device, register it through Microsoft Security Info, and use it for secure sign-in.

Once you have a compatible key, follow the directions below to set up your security key on your account. You can register the key yourself. If you cannot complete the verification needed during setup, or need help using your key, request MFA assistance or contact the IT Solutions Center.

We recommend adding another available MFA method so you have a way to sign in if your key is unavailable.

Set up your security key on a Windows device

1. Select settings
2. Select accounts
3. Select sign in options
4. Select security key
   1. This will open the option for sign into apps with a physical security key
5. Select manage
   1. This will give you the windows hello setup screen
6. Plug in security key into device
7. Add a security Key fingerprint if biometric security key, if not skip this step
8. Add a security key pin
   1. Once completed you can now proceed to register it with your account

Register Security Key with Microsoft Account

1. Open your Microsoft account security settings
2. Log in with your username (starID@go.minnstate.edu or starID@minnstate.edu) and password.
3. Choose Add sign-in method.
4. Choose Security key.
5. Select USB Device.
6. Read the prompt on the screen advising of you will need to do next
7. Click Next
8. Plug in your security when prompted
9. Follow further instructions in the prompts depending on specific type of security key being used
   1. Touch the fingerprint sensor if a biometric security key 
   2. Enter pin if not biometric
10. Return to the Security info page, type a name you'll recognize later for your new security key, and then select Next.
11. Select Done to close the Security key page.
12. The Security info page is updated with your security key information.

Outcome

• Microsoft's instructions and additional information

Visit the IT Solutions Center page to view current hours, locations, and contact information.