For more information about UH Login and Multi-Factor Authentication (MFA), go to www.hawaii.edu/its/uhlogin.

UH Login supports the following MFA methods:

• Duo Push, using a mobile device (smartphone or tablet)
• Phone call, using either a mobile phone or landline
• SMS passcodes, using a mobile phone that supports SMS (text messaging)
• Yubikey hard token, which is inserted into your computer's USB port

Duo Push

If you have a supported mobile device, Duo Push is the recommended method. As long as your mobile device has mobile network or wi-fi service, authentication requests can be pushed to your device via the Duo Mobile app. You can download the Duo Mobile app to an iOS, Android, or Windows Phone device that meets the minimum requirements.

Once you have downloaded the Duo Mobile app and registered your mobile device, authentication requests will be "pushed" to your device through the Duo Mobile app. You would then open the Duo Mobile app and tap on "Approve" or "Deny" to approve or deny the authentication request.

If you are in a location without mobile network or wi-fi service, the Duo Mobile app can also generate a "smart code" that can be used to login.

Phone Call

You can opt to authenticate via a phone call to a landline or mobile phone. When it's time to authenticate, you will receive a call on your registered phone number. You would then push "1" on your phone's keypad to authenticate, or push "9" to deny the authentication request.

Regarding phone numbers beginning with "+86"

ITS has been informed by Duo that due to recent telephony restrictions by the Chinese government, Duo is no longer able to authenticate by phone calls to users with +86 numbers. If you have a +86 phone number registered in Duo, you will see the following notice:

Other methods, such as Duo Push, SMS passcodes, or hard tokens will still work. For more information, please refer to the following Duo knowledgebase article:

https://help.duo.com/s/article/5001

SMS Passcodes

If you do not have a smartphone, but you have a mobile phone with text messaging capabilities, you can use SMS passcodes to authenticate. A sequence of 10 passcodes will be sent as a text (SMS) message to your phone. Each time you authenticate, you would use the next passcode in the sequence. After you've used all 10 passcodes, you can request a new set of 10 passcodes. You can also request a new set of 10 passcodes at any time, even before using all 10 passcodes. You can use the next valid passcode to authenticate even if you do not have mobile network or wi-fi service.

Yubikey Hard Token

A hard token (sometimes called an authentication or security token) is a hardware security device that is used to authorize a user. UH provides Yubikey hard tokens for purchase. The UH hard token is a usb device and must be inserted into your usb port to be used. You would then touch the hard token anytime you wanted to authenticate. If you do not have an available usb port, you cannot authenticate with the UH hard token. Hard tokens are not recommended and should be purchased only if you cannot use any of the other above means for authenticating.

For information on purchasing a UH hard token, please visit https://www.hawaii.edu/sitelic/tokens/

• Setting up a Smartphone
• Setting up a Landline
• Setting up a non-Smartphone Cellular Phone
• Setting up a Tablet

For more information about UH Login and Multi-Factor Authentication (MFA), go to www.hawaii.edu/its/uhlogin.

Before going through this article, please review UH Login Multi-Factor Authentication (MFA) - Which authentication method should I use? to determine which authentication method suits your situation best. Once you have decided which method to use, use this document to register your first device. This document will explain how to register a mobile device, landline, or tablet as your first device to use for MFA.

We strongly recommend registering at least 2 devices. For example: a smartphone and an office landline. Please refer to UH Login Multi-Factor Authentication (MFA) - Managing Devices for information on managing registered devices, or UH Login Multi-Factor Authentication (MFA) - Adding Devices for information on registering additional devices.

Setting up a Smartphone

Although the screenshots and instructions that follow are for an iPhone, the steps are the same for iPhones and Android phones, except for identifying the type of smartphone.

Watch video

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. You will see the following screen. Click on the Start setup button.




3. Select Mobile phone, then click Continue.




4. If necessary, select the country of your phone. Type your phone number, including area code (no parentheses or dashes are needed). Double check that the correct phone number is shown immediately beneath the box. If so, check the box next to the phone number. Click on Continue.




5. Select the type of smartphone (in this case iPhone), then click Continue.




6. If you have downloaded the Duo Mobile app to your phone, go to the next step. If you have not yet downloaded the Duo Mobile app to your phone, follow the directions within the box to download. You can also visit one of the following links from your smartphone (not your computer):
   iOS: Duo Mobile for iOS
   Android: Duo Mobile for Android
   [Note: to download from the Google Play Store, you need to be logged in with a gmail.com account or enrolled in Consumer Apps.]
   
   


7. Once you have downloaded the app to your phone, or if you already have the app downloaded to your phone, click on I have Duo Mobile installed.

8. You will see a barcode displayed.

   Open the Duo Mobile app on your phone. If you are asked if you want to allow Duo Mobile to send Notifications, please allow notifications.

   Press the + icon in the upper right corner, or press on the Add Account button. If you are asked if you want to allow Duo Mobile to access the Camera, please allow access.

   Point your phone's camera (the camera's display should be shown on the phone's screen) at the barcode. Once the barcode is properly within the display, it will automatically be recognized. You can tell it was successful if you see a green checkmark within the barcode.

   Once you see the green checkmark, click on Continue.




9. At the next screen, you should see a green Saved button in the lower left. The When I log in option should be set to Ask me to choose an authentication method. Click on the Continue to Login button.
   
   


10. If you were registering your device through the UH Login MFA Device Registration site, at the bottom of the next screen, you should see the message Enrollment successful!... This means that you have successfully registered your smartphone. You can now logout of the UH Login MFA Device Registration site.

For further information on the Duo Mobile app, please refer to Duo's guides:
iPhone: https://guide.duo.com/iphone
Android: https://guide.duo.com/android

Setting up a Landline

Watch video

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. You will see the following screen. Click on the Start setup button.




3. Select Landline, then click Continue.




4. If necessary, select the country of your phone. Type your phone number, including area code (no parentheses or dashes are needed). If you have an extension, type it in the Extension: box. Double check that the correct phone number is shown immediately beneath the box. If so, check the box next to the phone number. Scroll down, and click on Continue.




5. At the next screen, you should see a green Saved button in the lower left. The When I log in option should be set to Ask me to choose an authentication method. Click on the Continue to Login button.
   
   


6. If you were registering your device through the UH Login MFA Device Registration site, you should see the message Enrollment successful!...  This means that you have successfully registered your landline. You can now logout of the UH Login MFA Device Registration site.

Setting up a non-Smartphone Cellular Phone

Watch video

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. You will see the following screen. Click on the Start setup button.




3. Select Mobile phone, then click Continue.




4. If necessary, select the country of your phone. Type your phone number, including area code (no parentheses or dashes are needed). Double check that the correct phone number is shown immediately beneath the box. If so, check the box next to the phone number. Scroll down, and click on Continue.




5. Select Other as the type of phone, then click Continue.




6. At the next screen, you should see a green Saved button in the lower left. The When I log in option should be set to Ask me to choose an authentication method. Click on the Continue to Login button.
   
   


7. If you were registering your device through the UH Login MFA Device Registration site, you should see the message Enrollment successful!... This means that you have successfully registered your non-smartphone cellular phone. You can now logout of the UH Login MFA Device Registration site.

Setting up a Tablet

Although the screenshots and instructions that follow are for an iPad, the steps are the same for Android tablets.

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. You will see the following screen. Click on the Start setup button.




3. Select Tablet, then click Continue.
   
   


4. Select the type of tablet.  In this example, we will select iOS. Click Continue.




5. If you have downloaded the Duo Mobile app to your tablet, go to the next step. If you have not yet downloaded the Duo Mobile app to your tablet, follow the directions within the box to download. You can also visit one of the following links from your tablet (not your computer):
   iOS: Duo Mobile for iOS
   Android: Duo Mobile for Android
   [Note: to download from the Android Play Store, you need to be enrolled in Consumer Apps or logged in with a gmail.com account.]
   
   



6. You will see a barcode displayed.

   Open the Duo Mobile app on your tablet. If you are asked if you want to allow Duo Mobile to send Notifications, please allow notifications.

   Press the + icon in the upper right corner, or press on the Add Account button. If you are asked if you want to allow Duo Mobile to access the Camera, please allow access.

   Point your tablet's camera (the camera's display should be shown on the phone's screen) at the barcode. Once the barcode is properly within the display, it will automatically be recognized. You can tell it was successful if you see a green checkmark within the barcode.

   Once you see the green checkmark, click on Continue.




7. At the next screen, you should see a green Saved button in the lower left. The When I log in option should be set to Ask me to choose an authentication method. Click on the Continue to Login button.
   
   


8. If you were registering your device through the UH Login MFA Device Registration site, at the bottom of the next screen, you should see the message Enrollment successful!... This means that you have successfully registered your tablet. You can now logout of the UH Login MFA Device Registration site.

This article will explain how to register devices for multi-factor authentication.

• Setting up a Smartphone
• Setting up a Landline
• Setting up a Tablet
• Setting up a non-Smartphone Cellular Phone

If you are not sure which authentication method to use, please review the article, UH Login Multi-Factor Authentication (MFA) - Which authentication method should I use?.

ITS recommends that you register at least 2 devices. For example: your office landline and your smartphone.

Setting up a Smartphone

Although the screenshots are for an iPhone, the steps are the same for iPhones and Android phones.

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. If you have not yet registered any devices, you will see the following screen. Click on the Start setup button, then proceed to Step 4.
   
   


3. If you have already setup a device, at the next screen, click on Add a new device (located on the left side, under the gold seal).
   You will then see the following screen. Click on the green button for the method you wish to use.
   
   


4. Select the authentication method you wish to use. For this example, we will register a mobile phone. Select Mobile phone, then click Continue.




5. If necessary, select the country of your phone. Type your phone number, including area code (no parentheses or dashes are needed). Double check that the correct phone number is shown immediately beneath the box. If so, check the box next to the phone number. Click on Continue.




6. Select your device type, then click Continue.




7. If you have downloaded the Duo Mobile app to your phone, go to the next step. If you have not yet downloaded the Duo Mobile app to your phone, follow the directions within the box to download. You can also visit one of the following links from your smartphone (not your computer):
   iOS: Duo Mobile for iOS
   Android: Duo Mobile for Android
   [Note: to download from the Android Play Store, you need to be enrolled in Consumer Apps or logged in with a gmail.com account.]
   
   



8. You will see a barcode displayed.

   Open the Duo Mobile app on your phone. If you are asked if you want to allow Duo Mobile to send Notifications, please allow notifications.

   Press the + icon in the upper right corner, or press on the Add Account button. If you are asked if you want to allow Duo Mobile to access the Camera, please allow access.

   Point your phone's camera (the camera's display should be shown on the phone's screen) at the barcode. Once the barcode is properly within the display, it will automatically be recognized. You can tell it was successful if you see a green checkmark within the barcode.

   Once you see the green checkmark, click on Continue.




9. You should be at the My Settings & Devices window. You should see a list of all your registered devices, with a Just Added next to the device you just added. This means that you have successfully registered the new device.


10. You can now logout of the UH Login MFA Device Registration site.

Setting up a Landline

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. If you have not yet registered any devices, you will see the following screen. Click on the Start setup button, then proceed to Step 4.
   
   


3. If you have already setup a device, at the next screen, click on Add a new device (located on the left side, under the gold seal).
   You will then see the following screen. Click on the green button for the method you wish to use.
   
   


4. Select the authentication method you wish to use. For this example, we will register a landline. Select Landline, then click Continue.




5. If necessary, select the country of your phone. Type your phone number, including area code (no parentheses or dashes are needed). If you have an extension, type it in the Extension: box. Double check that the correct phone number is shown immediately beneath the box. If so, check the box next to the phone number. Scroll down, and click on Continue.




6. You should be at the My Settings & Devices window. You should see a list of all your registered devices, with a Just Added next to the device you just added. This means that you have successfully registered the new device.


7. You can now logout of the UH Login MFA Device Registration site.

Setting up a Tablet

Although the screenshots are for an Android tablet, the steps are the same for iOS tablets (iPad and iPod Touch) and Android tablets.

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. If you have not yet registered any devices, you will see the following screen. Click on the Start setup button, then proceed to Step 4.
   
   


3. If you have already setup a device, at the next screen, click on Add a new device (located on the left side, under the gold seal).
   You will then see the following screen. Click on the green button for the method you wish to use.
   
   


4. Select the authentication method you wish to use. For this example, we will register a tablet. Select Tablet, then click Continue.




5. Select the appropriate type of device. For this example, we will select Android. Click Continue.




6. If you have downloaded the Duo Mobile app to your tablet, go to the next step. If you have not yet downloaded the Duo Mobile app to your tablet, follow the directions within the box to download. You can also visit one of the following links from your tablet (not your computer):
   iOS: Duo Mobile for iOS
   Android: Duo Mobile for Android
   [Note: to download from the Android Play Store, you need to be enrolled in Consumer Apps or logged in with a gmail.com account.]
   
   



7. You will see a barcode displayed.

   Open the Duo Mobile app on your tablet. If you are asked if you want to allow Duo Mobile to send Notifications, please allow notifications.

   Press the + icon in the upper right corner, or press on the Add Account button. If you are asked if you want to allow Duo Mobile to access the Camera, please allow access.

   Point your tablet's camera (the camera's display should be shown on the phone's screen) at the barcode. Once the barcode is properly within the display, it will automatically be recognized. You can tell it was successful if you see a green checkmark within the barcode.

   Once you see the green checkmark, click on Continue.




8. You should be at the My Settings & Devices window. You should see a list of all your registered devices, with a Just Added next to the device you just added. This means that you have successfully registered the new device.


9. You can now logout of the UH Login MFA Device Registration site.

Setting up a non-smartphone Cellular Phone

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. If you have not yet registered any devices, you will see the following screen. Click on the Start setup button, then proceed to Step 4.
   
   


3. If you have already setup a device, at the next screen, click on Add a new device (located on the left side, under the gold seal).
   You will then see the following screen. Click on the green button for the method you wish to use.
   
   


4. Select the authentication method you wish to use. For this example, we will register a mobile phone. Select Mobile phone then click Continue.




5. If necessary, select the country of your phone. Type your phone number, including area code (no parentheses or dashes are needed). Double check that the correct phone number is shown immediately beneath the box. If so, check the box next to the phone number. Click on Continue.




6. Select Other as your device type, then click Continue.
   
   


7. You should be at the My Settings & Devices window. You should see a list of all your registered devices, with a Just Added next to the device you just added. This means that you have successfully registered the new device.


8. You can now logout of the UH Login MFA Device Registration site.

This article explains how to login through the UH Login page using the different MFA methods. Please note that ITS strongly recommends that you setup at least two devices for MFA.

• Duo Push (smartphone, tablet)
• Phone call (mobile phone)
• SMS text codes (mobile phone)
• Duo App-generated code (smartphone, tablet)
• Landline
• UH Hard Token (Yubikey)

Duo Push (smartphone, tablet)

1. At the Duo MFA window, make sure your mobile phone or tablet is selected under the "Device" drop down menu.


2. Optionally, you can select the Remember me for 7 days option. If you select this option, you will not see the Duo MFA window for 7 days.


3. Click on the Send Me a Push button.
   
   


4. A notification will appear on your smartphone.
   
   • iPhone: Press and hold on the notification, then tap on Approve to approve or Deny if it was a fraudulent request. If necessary enter your iPhone's passcode.
   • Android: Tap on Notifications. You may have to unlock your phone. Tap on Approve to approve or Deny if it was a fraudulent request.

For further information on the Duo Mobile app, please refer to Duo's guides:
iPhone: https://guide.duo.com/iphone
Android: https://guide.duo.com/android

Phone call (mobile phone)

1. At the Duo MFA window, make sure your mobile phone is selected under "Devices".


2. Optionally, you can select the Remember me for 7 days option. If you select this option, you will not see the Duo MFA window for 7 days.


3. Click on the Call Me button.
   
   


4. A phone call will be placed to your mobile phone. Answer the call, then press 1 on the mobile phone's keypad to approve or press 9 to report a fraudulent request.

SMS text codes (mobile phone)

1. At the Duo MFA window, make sure your mobile phone is selected under "Devices".


2. Optionally, you can select the Remember me for 7 days option. If you select this option, you will not see the Duo MFA window for 7 days.


3. Click on the Enter a Passcode button.
   
   


4. If this is your first time logging in, or if you need a new set of text codes, click on Text me new codes.
   
   


5. A set of 10 codes will be texted to your mobile phone. Enter the first code (it should begin with the number 1) in the box, then click on Log In.
   
   


6. The next time you login, you can enter the next code in the sequence (e.g. the one starting with the number 2) to login. However, you can always click on Text me new codes to get a new set of codes.

Duo App-generated code (smartphone, tablet)

The Duo App will generate codes even if the smartphone or tablet does not have wifi or cellular data service.

1. At the Duo MFA window, make sure your smartphone or tablet is selected under "Devices".


2. Optionally, you can select the Remember me for 1 day option. If you select this option, you will not see the Duo MFA window for 7 days.


3. Click on the Enter a Passcode button.





4. Open the Duo Mobile app on your smartphone or tablet.


5. Depending on the version of Duo Mobile app that you have, you will either tap on the green key icon or down arrow icon next to "University of Hawaii".


or


6. A code will display. The code will remain valid until it is used. If you have the newer version of the Duo Mobile app, you can tap on the "circular arrows" icon to get a new code.



7. Enter the displayed code into the box, then click on Log In.

Landline

1. At the Duo MFA window, make sure your landline (e.g office) number is selected under "Devices".


2. Optionally, you can select the Remember me for 7 days option. If you select this option, you will not see the Duo MFA window for 7 days.


3. Click on the Call Me button.
   
   


4. A phone call will be placed to your designated landline phone. Answer the call, then press 1 on the Landline's keypad to approve or press 9 to report a fraudulent request.

UH Hard Token (Yubikey)

The UH hard token is a usb device that you would insert into your computer's usb port. You would then "touch" the gold area of the hard token to authenticate. UH hard tokens can be purchased through the ITS Site License office.  Please visit www.hawaii.edu/sitelic/tokens. Both USB A and USB C hard tokens are available.

1. Insert the hard token into your computer's USB port prior to any login attempts.
   Note for Macintosh users: the first time you insert a hard token into a Macintosh, you may be told, "Your keyboard is unrecognizable" or "Your keyboard cannot be identified". This message can be ignored; close the window by clicking on the red dot in the upper left.


2. When you get to the Duo MFA window, make sure either your mobile phone, tablet, or "Token" is selected under "Device".


3. Optionally, you can select the Remember me for 7 days option. If you select this option, you will not see the Duo MFA window for 7 days.


4. Click on the Enter a Passcode button.
   
   


5. If you have the USB A hard token, make sure you see the green light flashing on the "Y" in the gold circle. For either hard token, press down on the token's gold area with any finger (see below for where to press).



USB A hard token	USB C hard token



6. A (long) code will automatically be entered into the box, and the "Login" button will automatically be pressed, and you should now be logged in.
   
   

• My Settings & Devices screen
• Changing the default device
• Changing a device name
• Deleting a device
• Reactivating the Duo Mobile app (does not apply to landlines)

My Settings & Devices screen

To manage your Duo devices, you need to go to the My Settings & Devices screen.

1. Login to the UH Login MFA Device Registration site at www.hawaii.edu/its/uhlogin/device-reg.


2. You will see the following screen. Click on My Settings & Devices (located on the left side, under the gold seal).




3. You will then be asked to authenticate with your second factor again. Click on the appropriate button to proceed.


4. You will now be at the My Settings & Devices screen. You will see a list of your registered devices. This screenshot shows a sample of one registered device:
   
   
   
   This screenshot shows a sample of multiple registered devices:
   
   

Changing the default device

You can only change the default device if you have more than one device setup.

1. Go to the the My Settings & Devices screen as described in the My Settings & Devices screen section.


2. If necessary, scroll down. Under Default Device, click on the down arrow, then select the device you wish to be the default. Note: the When I login option should remain Ask me to choose an authentication method.




3. If necessary, scroll down. Click on the Save button. When the change has been saved, the Save button will change to a Saved button.


4. If you are done with managing your devices, you can logout of the UH Login MFA Device Registration site.

Changing a device name

1. Go to the the My Settings & Devices screen as described in the My Settings & Devices screen section.


2. Click on the Device Options button that's on the same line as the device whose name you wish to change.




3. The screen will now look like the one below. Click on the Change Device Name button.




4. In the box that appears, type a new name for your device. Click on the Save button. To cancel the change, click on the X button.




5. You will see a message that you have successfully modified the device name. If you are done with managing your devices, you can logout of the UH Login MFA Device Registration site.

Deleting a device

1. Go to the the My Settings & Devices screen as described in the My Settings & Devices screen section.


2. Click on the Device Options button that's on the same line as the device you wish to delete.




3. The screen will now look like the one below. Click on the Trash Can icon.




4. You will be asked if you're sure you want to remove the device. If you are sure, click on the Remove button; otherwise, click on Cancel.




5. You will see a message that you have successfully removed the device. If you are done with managing your devices, you can logout of the UH Login MFA Device Registration site.

Reactivating the Duo Mobile app (does not apply to landlines)

If you have a new phone but have the same phone number, you need to "reactivate" the Duo Mobile app on your new phone. (If you have a new phone AND a new phone number, activate the new phone as a new device.)

1. Go to the the My Settings & Devices screen as described in the My Settings & Devices screen section. For Step 3, click on the Call Me button. Your phone will ring. Answer the call and press "1" on the keypad to approve the login and proceed.


2. Click on the Device Options button that's on the same line as the device you wish to reactivate.




3. The screen will now look like the one below. Click on the Reactivate Duo Mobile button.




4. Select the appropriate phone type for the new phone, then click Continue.
   
   


5. Below is the next screen you will see if you picked iPhone in step 5 (if you picked Android the remaining steps are similar). If you have not yet downloaded the Duo Mobile app to your new phone, follow the directions within the box to download and install the app. Once you have downloaded the app to your new phone, or if you already have the app downloaded to your new phone, click on I have Duo Mobile installed.





6. You will see a barcode displayed.

   Open the Duo Mobile app on your phone. If you are asked if you want to allow Duo Mobile to send Notifications, please allow notifications.

   Press the + icon in the upper right corner, or press on the Add Account button. If you are asked if you want to allow Duo Mobile to access the Camera, please allow access.

   Point your phone's camera (the camera's display should be shown on the phone's screen) at the barcode. Once the barcode is properly within the display, it will automatically be recognized. You can tell it was successful if you see a green checkmark within the barcode.

   Once you see the green checkmark, click on Continue.





7. You have now activated the Duo Mobile app on your new phone. If you are done with managing your devices, you can logout of the UH Login MFA Device Registration site.