Duo NetID 2-Factor Authentication - Device Enrollment and Reactivation

A video for the Duo 2-factor enrollment process is available at https://www.youtube.com/watch?v=0ez_KjeeTng.

The steps below detail how to enroll your NetID account in Duo NetID Two-Factor Authentication, and how to setup an Android or iPhone to receive login requests from your two-factor account. Duo requires Android 8.0 or newer and iOS 13.0 or newer. For assistance in adding tablets, landlines, or cell phones that are not smartphones, contact Help Desk Central at (979) 845-8300 or helpdesk@tamu.edu.

Please note, if you begin DUO enrollment but do not complete it, this can cause errors when trying to access DUO secured applications/sites. Please fully complete the enrollment to prevent any issues with your account.

Instructions

1. Download Duo Security's mobile application from your smartphone's app store. It is free and appears under the name Duo Mobile. It published by the company Duo Security. Note: This is not the same as Google Duo, which is a video calling app.
2. Go to duo.tamu.edu and click Enroll in Duo
3. Log in with your NetID and NetID password
4. If you have not yet added a device to use with Duo, click Start Setup.
   If you have added devices in the past, click on Add a new device.
5. Choose Mobile Phone. Click Continue.
6. Enter your phone number and click the check box to confirm that it is correct.
7. Verify ownership of your device. Do this by call or text and typing in the verification code you receive. Click Continue.
   NOTE: For “SMS passcode” and “phone call approval”, please note that these will be disabled as Verified Push is rolled out (November 25).
8. Choose your smartphone’s platform. Click Continue. If you are using a cell phone that is not listed, contact Help Desk Central
9. Click I have Duo Mobile installed
10. Use the Duo Mobile application to scan the QR code in your web browser by holding your phone's camera up to the image. If you are unable to scan the QR code, click the Having problems? link, where you will be asked to type in a valid email address that Duo Security can send a confirmation to. 
    NOTE: You must have an Internet connection in order for the QR code to work properly
11. Click Done to finish setting up the device, or click Enroll another device to add others.

It is strongly recommended that you set up more than one device to use with Duo NetID Two-Factor Authentication. In the case that your primary device is inaccessible, you can use a secondary device as a backup.

If you have any further questions, email helpdesk@tamu.edu or call (979) 845-8300.

Information

These directions will help you reactivate the Duo app if you have a new phone with the same number. These directions will also help you if you simply need to reactivate push notifications for any reason. If your phone number has changed, please call Help Desk Central at (979) 845-8300 or start a chat at help.tamu.edu.

Instructions

When setting up a new phone, we recommend following the instruction below from an incognito or private browser session or from a web browser you do not typically use.  Otherwise, the browser may default to Push authentication (or whatever you have set your default to be) rather than giving you the opportunity to select Call Me as your authentication type. 
  inside

1. Go to duo.tamu.edu and click Enroll in Duo.
2. Log in with your NetID and NetID password.
3. Authenticate by entering the provided code in the Duo mobile app.
4. Click on Manage Devices.
5. Authenticate once again, however you can select from Duo Verified Push, Duo Mobile Passcode, or Bypass code.
   NOTE: For the bypass code you will need to contact Help Desk Central. Please call (979) 845-8300 or visit the Computing Services Complex (CSC), room CS00.
6. Click on I have a new phone.
7. A window will pop-up, click on Get Started.
8. Follow the prompts. Once you scan the QR code and a green check mark appears, you are done!

Overview

A USB token is a small chip designed to fit into a computer's USB slot. Its small size allows it to be carried on a key ring or a lanyard for convenience. USB tokens for use with Duo NetID Two-Factor Authentication can be purchased by faculty, staff, students, or university departments. They are not available for purchase by students at this time. Please visit the Texas A&M Software Store for more information on USB keys.

More information about Duo NetID Two-Factor Authentication and how it pertains to Texas A&M, visit Duo Security Two-Factor Authentication. 

Instructions

Insert your USB token into an available USB slot on your computer.

1. Log into a website that uses the Central Authentication Service using your NetID and NetID password.
2. After logging in, you will be prompted to provide secondary authentication. If you have two-factor authentication set up, you will see your mobile device listed in the Device field at the top of the page. To use your hardware token, choose the Token option under the drop down menu. 
3. Click Enter Passcode.
4. Press your finger to the contact on your USB token. You should see the passcode field populated by a string of characters. This is the passcode being generated by your USB token.
    
   You should then be successfully logged into the website you were trying to access.
    

Recommendations on which USB token will be most appropriate for you can be found at https://u.tamu.edu/KB0016156