Description:
This is a USB device that can be used as an alternative MFA method. This will not work with Remote Desktop.
Please note that you cannot install this without either approving with an existing phone/app method or adding one first. So if the user has no phone access temporarily give them access to a Windows authenticator (instructions at the end)
Add Security Key
From Outlook webmail
- Click on your name (top right) & select View Account
- Select Security Info
- Select Add method
- Select Security Key
- Select USB device
- Click Next & when prompted plug in the security key
- Click OK
- Click OK
- When prompted create a PIN & click OK (or if asked for an existing PIN enter yours)
- Press the button on the security key
- Enter a name for the key and press Next
- Done
Change PIN or Clear Key
Plug the USB key into your PC
- Type Sign-in in the search bar on your task bar
- Select Sign-in options
- Click on Security Key & select Manage
- Press the button on the key
- Select Change or Reset as required
Add Windows Authentication App
On the app store assign WinOTP authenticator to the user, then ask them to install it
/wiki/spaces/ITKB/pages/2001670
On MS Secu