A Feitian Hardware Token is a small, battery-powered device, often on a keychain, that displays a numeric code. This code changes automatically every 30-60 seconds. You must read the code from the token's screen and type it into the 2FA prompt to log in.

Note: These steps are only for the Feitian c100 token. No other Feitian tokens, including the c200, are approved as compatible with UA systems.

____________________

Instructions

1. 1. Navigate to the 2FA Portal.
   2. Select Manage Your Account and log in with your NetID and password.
   3. Scroll down and select the Hardware Token drop-down panel.
   4. Select Add an HOTP Token.
      
       

_______________

The HOTP Secret & Serial Number
Enter the Serial Number that is found on the back of the Feitian hardware token. 

Follow the instructions that match where you got your token for the HOTP Secret.

1. 1. If you purchased your token from the UA Bookstore:
      1. Leave the HOTP Secret field blank.
   2. If you purchased your device from the Feitian website, you must enter the HOTP Secret from the.txt file attachment you received in an email from Feitian. 
      1. Open the attachment. You will see two long values separated by a space.
      2. Copy the second value and paste it into the HOTP Secret field.
         
          
   3. Click Continue.

Follow the steps below to log in with your Feitian c100 OTP hardware token.

Note: These steps are only for the Feitian c100 token. No other Feitian tokens, including the c200, are compatible with UA systems.

_______________

Instructions

1. 1. Log in to a UA service with your NetID and password as usual. You will be directed to the 2FA authentication page.
   2. The 2FA page may default to your last-used login method (e.g., a Duo Push). If your hardware token is not the default, select Other Options and then select your Feitian token.
   3. When prompted for a passcode:
      1. Press the refresh button on your Feitian token (it looks like a power button) to generate a new six-digit passcode.
         
          
      2. Type this passcode into the field on your screen. 
         
          
   4. Select Verify.
   5. The prompt "Is this your device?" refers to remembering you for future logins.
      1. Select "Yes, this is my device" ONLY if you are on a private, secure computer.
      2. Select "No, other people use this device" if you are on a shared or public computer (e.g., in a library, lab, or classroom).
         
          
   6. If you see the prompt in the screenshot below, click the checkbox to Trust this browser for 30 days.
      
      Note: Check this box only if you are on a private, secure computer. Never use this option on a shared or public computer (e.g., in a library, lab, or classroom). Please be aware that some high-security services may still require 2FA, even after you have trusted the browser.
      
       
   7. Select Continue to application.

A YubiKey Hardware Token is a physical device that you connect to your computer or phone (via USB). When prompted, you will simply touch the sensor on the key to securely verify your presence. This key does not generate a code that you have to type; it sends a secure, unique signature to complete 2FA.

Note: Any Yubikey model except the FIDO U2F Security Key will work with 2FA, however these instructions are for the Yubikey 5 NFC.

______________________

This process is broken out into three parts:

1. 1. Start the process in the 2FA Portal.
   2. Configure your YubiKey in a separate app.
   3. Finish by copying the key details back into the 2FA Portal.

______________________

Part 1: Add a Device in the 2FA Portal

Instructions

1. 1. Navigate to the 2FA Portal.
   2. Select Manage Your Account and log in with your NetID and password.
   3. Scroll down and select Hardware Token.
   4. Select Add a Yubikey Token.
      
       
   5. A new window will open. Keep this 2FA Portal window open, as you will need it for both Part 2 and Part 3.

______________________

Part 2: Configure the YubiKey Manager App

Instructions

1. 1. You can retrieve the Yubikey Manager installer for Mac OS X, Windows and Linux.
   2. Install and open the Yubikey Manager app.
   3. Insert your Yubikey device into a USB port on your computer.
   4. In the Yubikey Manager app, select Applications > OTP.
      
       
   5. Under Slot 1, click the Configure button.
      
       
   6. For Credential Type, select Yubico OTP and click Next.
      
       
   7. Check the Use serial box.
      
       
   8. Select the Generate button for both the Private ID and Secret Key. 
      
       

You will use the three codes you generated in Part 3.

______________________

Part 3: Add Your Key to the 2FA Portal

Instructions

1. 1. In the YubiKey Manager app, find and copy the three values you just generated.
   2. Return to the 2FA window you left open in Part 1 and paste the values into the matching fields:
      
      

      Copy From the App	Paste Into the Portal
      Secret Key	Secret Key
      Private ID	Private Identity
      Public ID	Serial Number

       
   3. In the YubiKey Manager app, select Finish and quit the app.
   4. In the 2FA Portal window, click Continue.
   5. A success message appears on your computer.
   6. Select Close to finish.

Follow the steps below to log in with your Yubikey hardware token.

Note: Any Yubikey model except the FIDO U2F Security Key will work with 2FA, however these instructions are for the Yubikey 5 NFC.

____________________

Instructions

1. 1. Log in to a UA service with your NetID and password as usual. You will be directed to the 2FA authentication page.
   2. The 2FA page may default to your last-used login method (e.g., a Duo Push). If your hardware token is not the default, select Other Options and then select your Yubikey token.
   3. When prompted for a passcode, insert the Yubikey into a USB port on the computer..
      
       
   4. With the cursor in the Passcode field, press the touch-sensitive circle (some models may have a button) on the Yubikey to 'type' a one-time password (OTP) into the field.
      
      Note: If your USB port is old or dirty, you may get this error: "This passcode has already been used, try again with a new passcode." 
      
       
   5. The prompt "Is this your device?" refers to remembering you for future logins.
      1. Select "Yes, this is my device" ONLY if you are on a private, secure computer.
      2. Select "No, other people use this device" if you are on a shared or public computer (e.g., in a library, lab, or classroom).
      
       
   6. If you see the prompt in the screenshot below, click the checkbox to Trust this browser for 30 days.
      
      Note: Check this box only if you are on a private, secure computer. Never use this option on a shared or public computer (e.g., in a library, lab, or classroom). Please be aware that some high-security services may still require 2FA, even after you have trusted the browser.
      
       
   7. Select Continue to application.