Summary
This article provides basic recommendations for USNH approved YubiKeys. This article is intended for USNH faculty and staff and holds the USNH recommended MFA hardware tokens.
IMPORTANT! The model of YubiKey previously provided by Enterprise Technology & Services, YubiKey 4, is now considered deprecated and no additional units will be distributed. These older device will not work for Salesforce authentication or in other more modern authentication environments. See below for current versions.
Warning: Microsoft may require a PIN when using some models of YubiKey for M365 MFA. The YubiKey PIN is maintained through a desktop app provided by the YubiKey manufacturer called "YubiKey Manager".
Remember your YubiKey PIN or it will not work for M365 MFA.
If you lose or forget your YubiKey PIN, you will have to work with the YubiKey "YubiKey Manager" application to reset your PIN, or work with the YubiKey manufacturer directly - ET&S has no access to assist with lost YubiKey PINs. This is why ET&S Strongly recommends you have a secondary method set up for MFA. See MFA: Adding Backup Multi-Factor Authentication (MFA) Methods for instructions.
Content
Product Quick Facts
- YubiKeys are small USB devices that are inserted into a desktop or laptop computer USB port / Lighting connector
- Pressing the top or side button on the YubiKey generates and automatically enters a passcode on MFA prompts
- YubiKey 5 series meet Microsoft’s Modern Authentication hardware requirements
- Back to Top
YubiKey 5 Series (non-FIPS)
- NOT for use with FIPS systems such as Federal Grants
- Recommended for all other non-FIPS USNH systems
- Available in several form factors including USB-A, USB-C, NFC, and Lightning
- Recommended connector types are:
- YubiKey 5C NFC (USB-C)
- YubiKey 5Ci (USB-C & Lightning)
- Available from Yubico directly, or through popular online vendors such as Amazon, Connection, or CDW-G through the USNH UShopNH portal . ET&S does not provide YubiKeys for faculty and staff.
- Back to Top
YubiKey 5 FIPS Series
- Certified to meet FIPS 140-2 compliance requirements for systems that interact with US government agencies.
- Stamped with the word “FIPS”
- Available in several form factors including USB-A, USB-C, NFC, and Lightning
- Recommended connector types are:
- YubiKey 5C NFC (USB-C)
- YubiKey 5Ci (USB-C & Lightning)
- Not available through most online vendors
- Must be purchased directly through Yubico or a certified Yubico Gold reseller
- Back to Top
Further Readings
MFA: Setting up YubiKey for Microsoft Authentication
MFA: Adding Backup Multi-Factor Authentication (MFA) Methods
MFA: Multi-factor Authentication and USNH Systems
Multi-factor Authentication (MFA) - Knowledge Base articles
USNH Equitable Access to Technology
NIST FIPS 140-2 - NIST Computer Security Resource Center
Yubico
UShopNH portal
Certified Yubico Gold resellers
Need additional help?
Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request. For password issues you must call or visit the Help Desk in person.