Duo - International Travel

Overview

When traveling outside of the United States, you should always use a virtual private network (VPN) as a second layer of security when connecting to the Internet. Texas A&M University's VPN service requires Duo NetID Two-Factor Authentication. While traveling internationally, you may be unable to use a smartphone, have limited access to a telephone, or have a computer without USB ports. Duo provides solutions to each of these situations, but you must set up these solutions in advance.

Duo provides three options that can be utilized as your second factor:

• Duo Push: Mobile app downloaded to your smartphone
• Phone call
• Passcode: A one-time code generated via a token purchased from the Software Store (YubiKey or Duo hardware token) or by the Duo app on a smartphone. You do not need a cellular connection for the Duo app to generate a valid passcode.

You should set up all of these options before leaving the country to ensure you will be prepared for any situation.

If you are unable to use...

A Smartphone

If you are unable to use a smartphone while traveling, you can authenticate by telephone, token (either YubiKey or Duo hardware token), or a six-digit passcode.

A Telephone Regularly

If you will not have regular access to a telephone while traveling, you can authenticate using either a YubiKey or a Duo hardware token.

USB Ports on the computer

If you will not have have regular access to a telephone while traveling, and/or your computer does not have a USB port (which prevents the use of a YubiKey), you should use a Duo hardware token to authenticate.

Using your chosen authentication method

When prompted with a Duo authentication screen

When accessing a Texas A&M service that requires Duo, you see a webpage or window prompting you to choose an authentication method (). The choices given are Push, Call, or Passcode.

• Push - If you select Push, a request for authentication will be sent to the Duo app on your smartphone. 
• Call - If you select call, Duo will place a phone call to the phone number you have previously registered with Duo. Follow the instructions given in the call to provide authentication.
• Passcode - If you select passcode, you will enter a one-time passcode generated by either the Duo app on your smartphone, a YubiKey, or a Duo hardware token.
  • Duo app
    1. Open the Duo app on your smartphone.
    2. Select Texas A&M from the menu.
    3. Enter the six-digit code displayed.
  • YubiKey
    1. Insert your YubiKey into an available USB port on the computer.
    2. Make sure you have selected the passcode field in the Duo authentication screen.
    3. Press the touchpad of the YubiKey with your finger. A one-time passcode will automatically populate in the passcode field.
  • Duo hardware token
    1. Press the button on your Duo hardware token.
    2. Enter the code displayed on the hardware token.

When you are not prompted with a Duo authentication screen

Some Texas A&M services, such as VPN, do not display a Duo authentication screen or window. For these services, you will need to indicate your authentication method while entering your password. You will do this by including a command or one-time passcode after a comma at the end of your password. In the examples below, we are using the example password Aggies2018.

• Push - Aggies2018,push OR Aggies2018
  • Entering your password followed by a comma and the word push will tell Duo to send a push request to your smartphone app. Push is also the default authentication method and will be used if you do not specify another method instead.
• Call - Aggies2018,phone
  • Entering your password followed by a comma and the word phone will tell Duo to call the default telephone number you have previously configured for use with Duo. Follow the instructions given in the call to authenticate.
• Passcode - Aggies2018,XXXXXXXXXXX
  • To use a one-time passcode, enter your password followed by a comma and then the one-time passcode itself.
    • Duo app - Enter the six-digit passcode displayed by the Duo app after the comma.
    • YubiKey - Use your finger to press the touchpad of the inserted YubiKey after entering your password and comma. The passcode generated by the YubiKey will be automatically added after the comma.
    • Duo hardware token - Enter the one-time passcode displayed by the hardware token after the comma.