DuoSecurity Enroll Devices - KBA

Overview

Why use two-factor authentication?

Duo Security two-factor authentication enhances the security of your CWRU accounts by using your phone or connected mobile device to verify your identity. Two-factor authentication prevents anyone but you from accessing your valuable data and CWRU accounts, even if they know your password.

What do I need to enroll in two-factor authentication?

Self enrollment is available via multiple methods. Information Security recommends all users enroll the following two devices:

• Mobile phone using the mobile application
• Desk phone (landline) using the voice call method

NOTE: Use your desk phone as a backup in the case that a mobile phone is lost, stolen or damaged.

How to enroll a mobile phone

Before you begin

Prepare to enroll a mobile phone by having each of these items ready:

• your CWRU network ID and password
• a laptop or desktop computer connected to the internet
• a copy of these instructions
• your Android or iOS mobile phone

Install the Duo Mobile application

1. Use your mobile phone to find the “Duo Mobile” application in either iTunes or the Google Play.
2. Install and launch the “Duo Mobile” application.

Add your mobile phone to the Duo Security profile

1. With your laptop or desktop computer, browse to the Duo Security self-enrollment page.
2. Type in your CWRU network ID and password when prompted.
3. Click the Start Setup button (Figure 1).
4. Choose “Mobile phone” as device type. Click Continue.
5. Choose country from the dropdown box (“United States” is default).
6. Enter 10-digit telephone number (Figure 2).
7. Check the box marked “(###) ###-#### is the correct phone number” and click Continue.
8. Choose phone operating system (iOS or Android). Click Continue.
9. Select “I have Duo Mobile installed” and click Continue.

• Click the green “Start Setup” button to begin

• 10-digit telephone number is required to enroll any mobile phone or landline

Add the CWRU account to your mobile application

NOTE: Use a free-standing monitor or large laptop to complete these steps. Barcode scanning on a compact display is challenging.

1. On your mobile phone, open the Duo Mobile application and tap the + or Add account button. Then tap Scan Barcode.
2. Use your mobile phone to scan the barcode shown on your computer screen.
3. After an account titled “Case Western Reserve University” appears on your mobile phone, click Continue on your computer.

• Successful mobile enrollment - DUO Mobile application displays CWRU account details

Add a descriptive device name

1. Click the gray Actions menu to the right of the newly added number (Figure 4).
2. Choose “Change Device Name…” and add a descriptive title for the number (ex., “My Work Mobile”).
3. Click the green check mark to complete name change (Figure 5).
4. Click Done to save all changes and exit the device management interface.

• Add, remove, rename or reorder devices from the device management interface

• Green banner indicates action completed and saved (e.g., device rename, default device set)

Sign in with mobile phone to complete enrollment

1. Select your mobile phone from the dropdown box labelled “Device”
2. Select the option for “Duo Push”.
3. Click the green Log in button (Figure 6).
4. Open the Duo Mobile application on your mobile phone and tap the DUO PUSH button.
5. Tap the Approve button (Figure 7).
6. A webpage titled “Self-Enrollment Success” will appear on your laptop or desktop computer. You have successfully enrolled.

• Choose mobile device (smartphone or tablet) to enable the Duo Push option

• Tap the green button to approve a login request

How to enroll a landline

Before you begin

Prepare to enroll a landline by having each of these items ready:

• a laptop or desktop computer connected to the internet
• a copy of these instructions
• your previously enrolled Android or iOS mobile phone
• a landline telephone handset

Authenticate with your mobile phone to add a new device

1. With your laptop or desktop computer, browse to the Duo Security self-enrollment page.
2. Choose Manage Devices
3. A push notification will be sent to your previously enrolled mobile phone.
4. Open the Duo Mobile application and accept the notification.
5. After accepting the notification, you will be signed in to the Duo Security interface.

Add your landline to the Duo Security profile

1. Choose Enroll another device.
2. Choose “Landline” as device type. Click Continue.
3. Choose country from the dropdown box (United States is default).
4. Enter 10-digit telephone number.
5. Check the box marked “(###) ###-#### is the correct phone number”.
6. Click Continue

• Choose a device to enroll

Add a descriptive device name

1. Click the gray Actions menu to the right of the newly added number.
2. Choose “Change Device Name…” and add a descriptive title for the number (ex., “My Crawford Office”).
3. Click the green check mark to complete name change.
4. Click Done to save all changes and exit the device management interface.

Sign in with landline to complete enrollment

1. Select the your landline from the dropdown box labelled “Device”
2. Select the option for “Phone call”.
3. Click the green Log in button.
4. Answer your phone, and press any key to log in.
5. A webpage titled “Self-Enrollment Success” will appear. You have successfully enrolled a second device.

• Web interface updates when phone is answered and on handset key press

Enroll additional devices

1. To enroll additional devices, choose Enroll another device and repeat the process.
2. To enroll a mobile phone that is NOT a smartphone, choose mobile phone, and “Other” as the OS type.
3. Install the Duo Mobile application BEFORE you begin the enrollment process for an Android or iOS tablet.

Set a default device

NOTE: After enrolling and naming devices, choose one as a default. Your default device receives all authentication requests (push notifications, calls or texts) when multiple devices are enrolled, unless specified otherwise at VPN sign in.

1. Return to the device management interface.
2. Click the gray Actions menu to the right of the newly added number.
3. Choose “Set as default” to change this to your default authentication method.
4. Click Done to save all changes and exit the device management interface.

• Default device receives push notifications or call when multiple devices are enrolled