For the latest information regarding technology support for the Coronavirus situation, please visit UCI TechPrep.

Duo Enrollment

Las instrucciones de inscripción de Duo también están disponibles en español.

If you work for the College of Health Sciences or the UCI Medical Center, your choices are slightly different. If you don't have a mobile phone and want to use a hardware token instead, please refer to this page to learn how to buy a Yubikey hardware token and how to properly register it. For Yubikey hardware token support, contact the HS Help Desk at (714) 456-3333. If you would like to use your mobile device for the Duo software token, contact the OIT Help Desk at oit@uci.edu or call (949) 824-2222.

Enroll your mobile device

Step 1: Install Duo Mobile on your mobile device

From your mobile device, download the Duo Mobile app (there are versions for iOS and Android). Once the app is installed, set your mobile device aside and come back to these instructions. The Duo Mobile app icon looks like this:

 

Step 2: Enroll your mobile device

From your computer, select the button below to open the Duo Support Desk in a new tab. If prompted, sign in with your UCInetID and password.

Step 2a: After you've logged in to the Duo Support Desk, click the Start Setup button to begin the enrollment process.


Step 2b: Select the your device type, then select Continue.


Step 2c: Enter your phone number, check the box to confirm you've entered the right number, and then select Continue.


Step 2d: Select the type of device you are enrolling, then select Continue.


Step 2e: Select I have Duo Mobile installed.


Step 2f: Pick up your mobile device and open the Duo Mobile app.

Tap the “+” button (located on the top-right of the app). Allow Camera access.

Hold your device to your computer screen and have the QR code centered on the camera. Duo will automatically scan the QR code. After the green checkmark appears, select Continue.


Step 2g: You’re almost done! The pulldown menu for “When I log in” gives you two options. Feel free to select either option. Then, select Continue to Login.


Step 2h: Select the Send Me a Push button, and your mobile device will receive a push.


Step 2i: Pick up your mobile device, and check the Duo Mobile app. If you see the message "Request Waiting. Tap to Respond..." at the top of the screen, tap that green bar. Then, select Approve to accept the Duo push request.


 

You're Done!

On your computer, you will see that your enrollment was a success. You can exit this page and access UCI applications that require Duo MFA for logins. Duo is mandatory for future UCI login attempts.

After enrolling, you have the ability to generate Emergency Backup Codes. This is optional. Backup codes can be used just in case you lose or replace your phone.

Now that you are enrolled, learn more about how to use Duo.

 

I don't have a mobile device

Step 1: Get a Hardware Token

If you don’t have a mobile device, the campus has funded independent Duo tokens for your use, free of charge.

Employees: You will need to obtain a Duo hardware token from your department’s security coordinator. If you’re not sure who to contact, please open a ticket.

Students: Please email oit@uci.edu to request for a Duo hardware token. Please include your UCInetID in the email.

Alternatively, students and employees can purchase a third-party hardware token from vendors like Yubikey. If you have a Yubikey, follow this link to enroll.

 

Step 2: Enroll your Hardware Token

From your computer, select the button below to open the Duo Support Desk in a new tab. If prompted, sign in with your UCInetID and password.

Once you're at the Duo Support Desk, you'll need to enter your hardware token's serial number, which can be found on the back of the token. Please note that some of the hardware token serial numbers will just be a string of numbers, and some will begin with the letters 'DSEC'. After you enter the number, select Register.

 

Step 3: Test your Token

Select the Test Token on the top-left of the page.

If prompted, you should login with your UCInetID and password. When you arrive at the UCI MultiFactor Login page, select the Enter a Passcode button.

Type in the 6-digit code that appears on your hardware token's screen, and then select Log In.

NOTE: The hardware token has a button on it that displays the token code when it is pressed. If the button is pressed too many times without the token code being used to log in, the token will get out of sync and you won't be able to log in until it is resynced. Having the token in your pocket or backpack with keys or other objects that could press on the button will cause this to happen. Contact the OIT Help Desk to get the token resynced.

 

You're Done!

On your computer, you will see that your enrollment was a success. You can exit this page and access UCI applications that require Duo MFA for logins. Duo is mandatory for future UCI login attempts.

After enrolling, you have the ability to generate Emergency Backup Codes. This is optional. Backup codes can be used just in case you lose or replace your phone.

Now that you are enrolled, learn more about how to use Duo.

 

After you've enrolled

How to use Duo after you have enrolled

 

How to send a Duo push to your mobile device

Step 1: Log in to a WebAuth-enabled service (such as ZotPortal or Canvas) as your normally would with your UCInetID and password.


Step 2: On the UCI MultiFactor Login screen, select Send Me a Push.


Step 3: Open the Duo Mobile app on your mobile device and you should see the message "Request Waiting. Tap to Respond..." up top. Tap the message in the green bar.


Step 4: The request will open. Tap Approve in the bottom left, and you're done! You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc).


 

How to enter a Duo passcode

Step 1: Log in to a WebAuth-enabled service (such as ZotPortal or Canvas) as your normally would with your UCInetID and password.


Step 2: On the UCI MultiFactor Login screen, select Enter a Passcode.


Step 3: Generate your 6-digit passcode.

Mobile Device Users: Open the Duo Mobile app and tap the 'Duo-Protected University of California - Irvine' token to expand it and reveal a 6-digit code that you can use.

Duo Hardware Token Users: Press the button on the token to generate a 6-digit code.


Step 4: Type the 6-digit code in the empty box on the UCI MultiFactor login screen, and then select Log in. That's it! You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc).


 

Remember me for 24 hours

Step 1: Log in to a WebAuth-enabled service (such as ZotPortal or Canvas) as your normally would with your UCInetID and password.


Step 2: On the UCI MultiFactor Login screen, check the 'Remember me for 24 hours' box. and then press Send Me a Push or Enter a Passcode to log in, and you're done!

NOTE: If the check box is greyed out, you may have to click the "Cancel" button on the web page screen where it says "Pushed a login request to your device...". Once you do, the "Remember me" checkbox should now be editable.


 

Generate backup codes

You'll need these in case you misplace or replace your phone.

You've probably heard that you shouldn't write down your password, but these backup codes are an exception. You should definitely print these or write these down and keep them handy in a place where you can find them in an emergency, like your wallet, pocketbook, or purse. These are single-use codes, so after you use a code it cannot be used again.

To generate your backup codes:

  1. Visit this emergency backup codes page.
  2. Select the Generate button on the bottom of the page to receive 10 backup codes.
  3. Copy and paste the codes in a document, and then print the document.
    • Alternatively you can store the backup codes in your password vault like LastPass, KeePass etc.

Get Help with Duo

Already using Duo MFA and have some questions or need some help?

About Duo

What is Duo MFA and what are the benefits?

Scroll Up