--- title: Using a YubiKey (OTP) for authentication with PingID description: "You can use a YubiKey for secure authentication with PingID. To set up your YubiKey, you need to register or 'pair' it with your account." component: pingid-user-guide page_id: pingid-user-guide:secure_authentication_with_pingid:pid_setting_up_yubikey_intro canonical_url: https://docs.pingidentity.com/pingid-user-guide/secure_authentication_with_pingid/pid_setting_up_yubikey_intro.html revdate: August 3, 2023 section_ids: pairing-your-yubikey: Pairing your YubiKey before-you-begin: Before you begin about-this-task: About this task steps: Steps result: Result: result-2: Result: next-steps: Next steps pairing-your-yubikey-vpn: Pairing your YubiKey (VPN) about-this-task-2: About this task steps-2: Steps result-3: Result: next-steps-2: Next steps pairing-your-yubikey-windows-login: Pairing your YubiKey (Windows login) about-this-task-3: About this task steps-3: Steps result-4: Result: result-5: Result: result-6: Result: result-7: Result next-steps-3: Next steps related-links: Related links --- # Using a YubiKey (OTP) for authentication with PingID You can use a YubiKey for secure authentication with PingID. To set up your YubiKey, you need to register or 'pair' it with your account. | | | | - | ---------------------------------------------------------------------------------------- | | | The option to pair your account with this device type is defined by your company policy. | Before you can start using your YubiKey to authenticate, you need to register or 'pair' it with your account. Pairing creates a trust between the YubiKey and your account so that you can use the YubiKey to authenticate during the sign-on process. You can use a YubiKey to access your account using a web browser, to access your company's VPN, or to access a Windows login or Mac login machine. For Mac login, you must register your YubiKey through the web to use it to access your Mac Login machine. | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | | * This section details how to use your YubiKey OTP for authentication with PingID. It is also possible to pair some types of YubiKey as a [security key](pid_using_security_key_auth.html) for the added security benefits of FIDO2 authentication. If you're not sure whether to pair your device as a YubiKey or a security key, then check with your organization's helpdesk representative before you pair it. * See for a list compatible YubiKey models. | * Web * VPN * Windows login ## Pairing your YubiKey Register or 'pair' your YubiKey hardware token, so you can use it to authenticate with PingID. ### Before you begin If you are using a virtual machine (VM) to connect to your accessing device, and you need to pair your YubiKey, configure your VM to recognize a USB device. ### About this task | | | | - | -------------------------------------------------------------------------------------------------------------------------------------------------- | | | After you have paired your device and authenticated successfully, you can also use it to authenticate for Windows login or Mac login, if required. | ### Steps 1. Sign on to your account or app, and when you see the registration window, click **Start**. ![A screen capture of the Registration window showing the Start button.](_images/gak1668088907565.png) You'll see the **Add a New Device** window, showing the YubiKey icon. ![A screen capture of the Add New Device window showing device options available for you to add.](_images/lcz1668089066706.png) 2. In the **Add a New Device** window, click **YubiKey**. #### Result: You are prompted to authenticate with your YubiKey. ![A screen capture of the Yubikey window prompting you to insert your Yubikey to pair it.](_images/egj1634047141255.png) 3. Insert the YubiKey into your computer USB port, make sure the **Alternative Authentication** window is the active window on your machine, and then tap the YubiKey. #### Result: \`\` A one-time passcode (OTP) automatically generates and enters into the **YubiKey Setup** window. **Verify** is selected automatically, and a green check mark appears, indicating the pairing request is successful. You are automatically signed on to your account or app. ### Next steps The next time you sign on to your account or application, you'll be able to use your YubiKey to authenticate. For more information, see [Authenticating with PingID using a YubiKey](pid_ug_auth_using_a_yubikey_intro.html). ## Pairing your YubiKey (VPN) Register or 'pair' your YubiKey hardware token so that you can use it to securely access your company's VPN with PingID. ### About this task To set up your YubiKey on your VPN: ### Steps 1. From your web browser or application, sign on to your VPN and enter your username and password. 2. Enter `other`. Click **Sign In**. 3. In the blank field, enter `YubiKey`. Click **Sign In**. 4. Insert your YubiKey into the USB port on your machine. 5. Click the **text** field to ensure your mouse cursor is placed in the field. Tap the YubiKey. #### Result: The YubiKey one-time passcode (OTP) is automatically entered into the text entry field. 6. Click **Sign In**. ### Next steps The next time you sign on to your account or application, you'll be able to use your YubiKey to authenticate. For more information, see [Authenticating with PingID using a YubiKey](pid_ug_auth_using_a_yubikey_intro.html). ## Pairing your YubiKey (Windows login) Register or 'pair' your YubiKey hardware token so that you can use it to access your Windows login machine securely with PingID. ### About this task | | | | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | | | If you are accessing Windows login through a virtual machine (VM), before pairing your YubiKey, make sure your VM is configured to recognize a USB device. | ### Steps 1. Sign on to your Windows machine. ![A screen capture of the Windows sign on page.](_images/une1564021179418.png) #### Result: The PingID registration window displays. ![A screen capture of the PingID registration window.](_images/mqz1564021181220.png) | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | Until you have successfully completed the registration process, you cannot minimize the PingID registration window. If you close the window, you are automatically redirected back to the sign-on page. | 2. Click **I want to use a different authentication method**. 3. In the**Alternative Authentication** window, select **Authenticate with YubiKey**. Click **Next**. ![A screen capture of the Alternative Authentication window displaying the Authentication Preference options.](../_images/rtp1564020913976.png) #### Result: The **Alternative Authentication** window displays, prompting your **YubiKey Setup** and verification. ![A screen capture of the Alternative Authentication window, prompting the YubiKey Setup authentication.](_images/qpu1564021146253.png) 4. Insert the YubiKey into your computer USB port. Tap the YubiKey. | | | | - | ---------------------------------------------------------------------------------------------- | | | Make sure that the **Alternative Authentication** window is the active window on your machine. | #### Result: A one-time passcode (OTP) is automatically generated and inserted into the **YubiKey Setup** window, and **Verify** is selected automatically. 5. The next time you sign on to your Windows machine, account, or app: 1. Enter a YubiKey OTP. 2. Press your YubiKey button to generate the OTP. 3. Click **Sign On** to authenticate and sign on. ### Result The green **Authenticated** message appears with a check mark, indicating that authentication is successful. You are signed on to your Windows machine. ![A screen capture of the Windows home desktop page.](_images/zoq1564021183904.png) ### Next steps The next time you sign on to your account or application, you'll be able to use your YubiKey to authenticate. For more information, see [Authenticating with PingID using a YubiKey](pid_ug_auth_using_a_yubikey_intro.html). ## Related links * [Authenticating with PingID using a YubiKey](pid_ug_auth_using_a_yubikey_intro.html)