Duo: Enroll a Duo Device

Duo Security (two-factor authentication) is stronger than a password alone, because it uses two factors to confirm that you are who you say you are.  The first factor is something you know (your Internet ID and password); the second factor is something you have (your devices).

This article will help you with the second factor: your Duo devices.  If you are still unsure about which devices to add, read Decide What Devices to Enroll in Duo. If you want to add an upgraded phone, read Add a New Phone.

Note:  If you had already signed up for Duo, but now you want to add the Duo Mobile app to your phone or tablet, you may need to re-enroll your phone in the app using these directions.

When you are finished enrolling any device, you will see the following Success message:

Duo's enrollment confirmation screen says "Enrollment Successful! Way to go! You can now authenticate to any Duo-protected service." 

In this article:

First time Duo user?  Create your account.

  1. If you have not enrolled a device before, you will need to create your Duo account first.
  2. Sign in to my-account.umn.edu with your internet ID (x500) and password.
  3. In the Self-Service menu on the left side of the page, click Duo Security.
    This is the left-hand sidebar on my-account.umn.edu . The DUO Security menu is expanded.
  4. Click Create or Manage Duo Account.
  5. Click the green Start Setup button. Then follow the directions below for the device(s) you have chosen to enroll.
  6. If this process does not work for you, contact Technology Help.

Enroll a smartphone or tablet

In order to enroll and use a smartphone or a tablet, you will need to download the Duo Mobile app.

Download the Duo Mobile app

  • Search for the Duo Mobile app wherever you go to download apps (App Store, Google Play, etc.).
  • Follow all directions for downloading and installing the Duo Mobile app to your device.
  • Do NOT go to the following sections before the Duo Mobile app is fully installed on your device.

Enroll a smartphone or tablet

  1. Navigate to my-account.umn.edu and sign in with your UMN internet ID (x500) and password.
  2. In the Self-Service menu on the left side of the page, click on Duo Security to expand the menu.
    This is the left-hand sidebar on my-account.umn.edu . The DUO Security menu is expanded.
  3. Click Create or Manage Duo Account.
    1. If this is the first device you are activating, you will see a welcome screen. Click Start Setup.
    2. If this is not your first device, authenticate with Duo and then click Add a new device.
  4. Choose Mobile phone or Tablet.
  5. Enter your phone number, confirm it is correct, and then click Continue.
  6. Select your device's operating system (iOS, Android, Windows Phone, Other).
  7. Setup will ask whether you have installed the Duo Mobile App.
    1. If you have completed this step already, click I have Duo Mobile installed.
    2. If not, download the Duo Mobile app on your phone or tablet before continuing.
  8. A QR code will appear on your screen.
  9. Open the Duo Mobile app on your phone or tablet, and click the + button at the top of the screen.
    This is a screenshot from the Duo Mobile app on an iPhone.  The plus symbol is selected; tapping it will add a new device.
  10. Hold your phone or tablet up to the computer to scan the QR code.
    This is a screenshot of the Duo Mobile app, scanning a QR code on an iPhone.  Scanning the QR code is what enrolls that phone in Duo Security.
  11. Click Continue. Your smartphone or tablet will now be listed as a device to use for Duo authentication.
  12. If this process does not work for you, contact Technology Help.

I can't scan the QR code!

  1. Click Or, have an activation link emailed to you instead.
    This Duo screen shows a QR code.  The words "Or, have an activation link emailed to you instead" are selected.
  2. Enter your email address.
  3. Use your mobile device to check your email. Click the link you receive.
  4. If your phone or tablet asks which App to use to open the link, select Duo Mobile.
  5. Click Continue to finish the enrollment process.

Enroll a landline phone

  1. Navigate to my-account.umn.edu and sign in with your UMN internet ID (x500) and password.
  2. In the Self-Service menu on the left side of the page, click on Duo Security to expand the menu.
    This is the left-hand sidebar on my-account.umn.edu . The DUO Security menu is expanded.
  3. Click Create or Manage Duo Account.
    1. If this is the first device you are activating, you will see a welcome screen. Click Start Setup.
    2. If this is not your first device, authenticate with Duo and then click Add a new device.
  4. Choose landline.
  5. Enter your phone number, confirm it is correct, and then click Continue. Your landline will now be listed as a Duo device.

    DUO Landline Enrollment Screen. Cursor is in the phone number field.

Enroll using Google Voice

In order to take advantage of this option, you will need to first set up Google Voice, and then enroll your Google Voice number in Duo.
Notes:

  • University accounts created after March 2019 are ineligible for Google Voice.
  • Google Voice is only available in the United States.
  • You will have to verify your Google Voice number with an existing U.S. mobile phone number.
  • For best results, use a non-University Google Mail account to sign up for Google Voice.

Set up Google Voice

  1. Sign into your Google Mail inbox.
  2. In the lower left hand corner, click the Google Voice icon.button.
  3. At the top of this new menu, click the + button.
    Google Voice Add Funds screen.
  4. This will take you to the Google Voice page.
  5. You will see a prompt to add money to your account; click Cancel.
  6. In the lower left corner, you'll see a message that says "To send messages, choose a Google Voice number". Click Choose number.
    Google Voice Add Phone Number message.
  7. A list of regions will appear; choose a region (it does not have to be a region you live or work in).
  8. You will be presented with a list of available phone numbers. Click Select next to the number you'd like to use.
  9. You will be asked for a current U.S. mobile phone number to validate with. Enter your mobile phone number and click Send Code.
  10. You will receive a text message from Google with a 6 digit verification code. Enter that code and click Verify.
  11. Your Google Voice number is now tied to your phone number. By default, any call going to your Google Voice number will forward to the number you verified with. To disable this setting, click the Settings button on the left side of the page in Google Voice.
    Google Voice interface. Arrow is pointing to Setting icon.
  12. On the Settings page, there is an option to Forward Calls to Linked Numbers. Uncheck this box to disable the call forwarding.
    Google Voice "Forward calls" interface. Activation button is unchecked.

Enroll Google Voice Number

  1. Navigate to my-account.umn.edu and sign in with your UMN internet ID (x500) and password.
  2. In the Self-Service menu on the left side of the page, click on Duo Security to expand the menu.
    This is the left-hand sidebar on my-account.umn.edu . The DUO Security menu is expanded.
  3. Click Create or Manage Duo Account.
    1. If this is the first device you are activating, you will see a welcome screen. Click Start Setup.
    2. If this is not your first device, authenticate with Duo and then click Add a new device.
  4. Choose Landline (Google Voice functions as a landline in this scenario).
  5. Enter your Google Voice phone number, confirm it is correct, and then click Continue.  Your Google Voice number will now be listed as a landline device to use for authentication.

Enroll a personal security key (U2F token)

Security Keys (U2F tokens) like Yubikey or HyperFido are small fobs that plug into your USB drive. You must supply your own Security Key if you wish to use one.

  1. Plug your security key into a USB port on your computer. Your computer should automatically detect and install the software needed for the token.
    A u2f token is inserted in a usb port.
  2. Navigate to my-account.umn.edu and sign in with your UMN internet ID (x500) and password.
  3. In the Self-Service menu on the left side of the page, click on Duo Security to expand the menu.
    This is the left-hand sidebar on my-account.umn.edu . The DUO Security menu is expanded.
  4. Click Create or Manage Duo Account.
    1. If this is the first device you are activating, you will see a welcome screen. Click Start Setup.
    2. If this is not your first device, authenticate with Duo and click Add a new device.
  5. Choose Security Key (YubiKey, Feitian, etc.)
    NOTE:  You will see a screen that tells you Duo is about to open a pop-up window. If you click Continue and do not see a pop-up, you may need to disable your pop-up blocker.
  6. When you see the pop-up screen, you will be prompted to tap, insert, or press the button on your security key, depending on the model of security key you are using. Once you do that, your Security Key will be ready for you to use.

Enroll a University-issued Duo hardware token

If you are unable (or choose not) to use any of the above methods, you may request a hardware token. A hardware token is a small plastic fob that generates a different series of letters/digits each time it is used. There will be no charge to users or departments. Please contact Technology Help via phone, email, chat, or walk-in location to request a hardware token.

Additional Information

Duo Security Two-Factor Authentication  

Duo: Setup & Use Two-Factor Authentication self-help guide 

 

TDX ID
3990