What is a security key?
A security key is a physical device that users must possess to access a system. Authentication data must flow between the user and the system to validate access (prove you are you), a security key is the conduit for making this happen. In our case they are small USB devices that you must plug into the computer that you are attempting to access.
Please note that CSUMB Hardware does not support any of the biometric options (using fingerprint or face ID). Do you not use this option unless you are configuring a security key.
How do I get a security key?
The IT Help Desk in the library will provide any Student, Faculty or Staff user with an MFA token. To reserve a security key for pick up at the IT Desk in the library:
- Fill out the Request a Security Key Service ticket.
- Once you have filed your service ticket, and we have verified that we have a key available for you, swing by the IT Help Desk in the library with your ticket number and we will issue you a key.
Setting up my security key
Step 1: Obtain your security key. (See section How do I get a security key?)
Step 2: Login into https://csumb.okta.com on any computer
Step 3: Click on your name in the upper right hand corner of your Okta Dashboard and select settings:
Step 4: At the settings page click on the Edit Profile button (if you are freshly logged into your account you may not see the edit profile button- if that is the case skip to step 6):
Step 5: Provide your password again for your csumb.edu account. You will also be asked for your current second security factor.
Step 6: Scroll down to the Extra Verification box within settings and click the Set up button next to Security Key or Biometric Authenticator:
Step 7: Click on the Setup button at the bottom of the Set up multifactor authentication box.
Step 8: Click on Enroll in the Set up security key or biometric authenticator
If you are on a PC, insert your key into a usb port and go to step 9.
If you are on a mac the window might look more like this:
Insert your key and give it a few minutes and it will take you to step 9.
Step 9: Create a PIN for your security key. We suggest it be at least 6 characters long. You will have to enter this every time you use your security key.
Note: If you are setting up your security key on a Mac using Safari as your web browser you will not be prompted to create a password.
Step 10: Allow csumb.okta.com to see the make and model of your security key by clicking allow. (you might not see this box if you are on a mac- instead you will have done this after step eight).
You have successfully enrolled your security key.
Using my security key
Step 1: Log into your csumb.edu account with your otterID and password.
Step 2: The next box will be your multifactor authentication box. If you see security key selected already you can skip this step.
Click on the triangle next to the multifactor circle to pull up a list of configured multifactor types. Select Security Key or Biometric Authenticator.
Note: Only configured authentication factors will show in the pull-down list. You can have multiple authentication types configured. We suggest you configure at least two so that you have a back-up method.
Step 3: Insert your security key into the USB port on the computer and then tap the circle on the security key with your finger.
Step 4: Enter your security key PIN number that you created when setting up your key.
Note: If you set up your key on mac using the Safari web browser you will not be prompted for a pin number.
You will then be successfully signed into your csumb okta resource.
If you select "do not challenge me" on the okta log in box you shouldn't have to insert your key for 24 hours. If you do not select that you may be prompted to re-insert your key.
ProTip: You do not have to leave in your security after you've authenticated.