Okta - Setup and Use a Security Key
This article reviews the setup process of connecting a security key to Okta for MFA access.
A security key is a physical device that must be inserted into the USB port of a computer (unless it is NFC enabled). There are multiple brands (the screenshots below depict a USB-A Yubikey from the manufacturer, Yubico) and options available (USB-A,USB-C, NFC-enabled, etc.). Every security key has a unique signature and must be paired with a chosen PIN number upon setup. When authenticating with the device, you will be prompted to enter a PIN number and then physically touch the device.
Setup Security Key Authentication
- First, insert the security key into the USB slot on your computer with the copper strips facing the inner part of the port.
- On the Set up multifactor authentication prompt, click the Setup button below the "Security Key or Biometric Authenticator" option.
- Click Enroll. A system dialog regarding the device will automatically pop-up.
- On the system dialog window, click OK until you are prompted to enter a PIN code.
- Enter a secure and memorable numerical PIN code in the New Security Key PIN and Confirm Security Key PIN fields, ensuring that they match exactly. This code must be at least four numbers in length. Click OK.
- Physically touch the "y" logo (or comparable) on the security key.
- The Security Key Authentication is now set up and ready for use.
Using Security Key Authentication
- First, insert the device into a USB slot on your computer with the copper strips facing the inner part of the port.
- When you attempt to access a service that is secured behind MFA, you will have the option to authenticate using a Security Key or Biometric Authenticator.
- On the Security Key or Biometric Authenticator Authentication screen, a system dialog about the security key will automatically open.
- Enter the PIN associated with your device and click OK.
- Physically touch the "y" logo (or comparable) on the security key.
- You should now successfully be directed to the service you were trying to connect to.