Summary

This article contains a step-by-step guide and videos directing you on how to set up your Security Key or Yubikey for your Windows or Mac workstation.

Body

Question

How do I set up Security Keys or YubiKeys for Windows and MacOS workstations?

Preface

Security Key Setup:

Security keys are a convenient alternative to using your cell phone, office phone or email to handle the Multifactor Authentication (MFA) system used by the University of Missouri System.

These easy-to-use keys help you log in to your computer, provide fast access to websites and applications and are more secure than other forms of authentication. Security keys help to protect against account takeovers, online attacks and phishing attempts.

To use a security key, you must purchase one. Departments also may purchase security keys for their employees if they wish by contacting their campus IT Help Desk staff.

Key Importance:

Treat your security key with the same importance as a car key.
Do not inscribe your name or any other meaningful personal information on the key. This includes stickers or keychains that contain said personally identifiable information.

PIN Security:

A PIN is mandatory and should not be simplistic, such as “000000” or “123456.”
Avoid writing the PIN on a sticky note; instead, create a memorable code that doesn’t require physical or electronic documentation.
Do not disable interfaces to circumvent the PIN prompt.
The minimum PIN length is 6 characters, with a preference for 8 or more alphanumeric characters.
Should contain numbers and letters.
PINs must not contain any personal identifiers like Employee ID, Social Security number, phone number or any details related to the key owner.

Key Custody:

Never leave your YubiKey or other security key unattended.
When traveling, keep the key separate from your laptop; for example, if the laptop is in a bag, carry the key in your pants pocket, purse or another carrying method.

Key Storage:

Upon stepping away from your laptop or computer, remove the key and store it securely, preferably on your person.
Do not keep your security key attached to your name badge/University ID card.

Public Use Precautions:

In public settings, be cautious of onlookers when entering your PIN. Physically rotate yourself 90 degrees to shield the PIN entry from view as you type it.

Authentication Methods:

After both the security key and the Microsoft Authenticator application have been configured on the account, visit mysignins.microsoft.com to remove the SMS and phone call authentication options from your account. These methods are less secure.

Loss Prevention:

In case of a lost or stolen key, report it immediately to the Division of IT by contacting the IT Help Desk.
And as soon as possible remove the security key as an authentication method from your account.
Log in to mysignins.microsoft.com with your alternative multi-factor method (i.e. Microsoft Authenticator).
Select Security info.
Click on Delete next to security key/method for the device that was lost or stolen.
Click OK to confirm deletion of security key.

Answer

Setting a PIN on MacOS

Click HERE to see a video representation of this procedure.

If you are using MacOS with Safari, a PIN must be set on the security key prior to registering the key with Microsoft. You must have software installed (i.e. YubiKey Authenticator) and be able to run that software as Administrator. For employees with MacOS, contact your IT staff to assist in establishing the PIN using the IT Pro workstation and process below.

Install the Yubico Authenticator app.
Open the Yubico Authenticator app and select Passkeys.
Select Set PIN.
Fill out New PIN and Confirm PIN. Your PIN must include both numbers and letters. Click the Save button when you're finished.

Microsoft Multi-Factor Authentication (MFA) Registration

Click HERE to see a video representation of this procedure.

Go to and log into mysignins.microsoft.com using your university (@umsystem.edu) email.
Select Security Info from the navigation menu.
Click Add sign-in method.
Select Security key.
Select USB device.
Plug your YubiKey into the USB and select the Next button.
A redirect window will prompt, wait a few seconds until the next window displays.
Setting up your passkey window will display. Select Next.
Enter a security key name and select Next.
Your security key is all set. Select Done.
You will now notice the security key under your list of authentication methods.