A hardware token is a small key fob device that is used to generate passcodes at the press of a button. The passcodes are used to complete the multi-factor authentication (MFA) process.
You can buy a hardware token for $20 USD (plus tax) as a personal purchase or as a departmental purchase. We have an article outlining accepted forms of payment and off-campus purchases.
A personal purchase means the token is your property, but you are spending your own money to get it. Visit the Terrapin Technology Store in McKeldin Library to buy one. You'll need a form of payment and your university ID card.
Departmental purchases require the assistance of a department business manager or other purchasing agent, and uses the university's funds to purchase. The token is then lent to you by the university for use.
Your token needs to be associated with your Duo account before you can use it.
if you already have a mobile device enrolled, you can register your token by visiting the UMD Multi-Factor Authentication Profile. Click Manage next to Hardware Tokens, then Register Your Hardware Token. If you are registering your hardware token prior to enrolling a mobile device, visit the Self-Enrollment page.
For further instruction on registering your hardware token, visit How To Register Your Multi-Factor Authentication Hardware Token.
In addition, any ID Notary can assist you with assigning your hardware token. If you need assistance with registering your hardware token or locating an ID Notary, contact the Service Desk at 301.405.1500.
Yes! Tokens purchased at Terrapin Tech have a six-month replacement warranty.
An ID Notary is a staff member who has been trained and verified to perform ID verification activities.
ID Notaries are located on and off campus in various departments. If you need assistance with finding an ID Notary, you may visit the Terrapin Technology Store located on the first floor of McKeldin Library.
If your department or unit does not have an ID Notary, a request can be submitted for access. The request should be submitted to email@example.com via an email that includes the applicant's directory ID, name, and phone number. A form and additional instructions will be sent to the applicant once the request for access has been processed.
IMPORTANT: ID Notary requests should only be submitted by HR Staff, Business Managers, or IT Support staff.
To use your hardware token, you will press a button to generate a passcode that you will use to log into the Duo Authentication Prompt on your computer. If there is a problem with your token, you can call or visit the Service Desk.
For an example of how a hardware token is used, check out Duo's article on Using Duo with a Hardware Token.
The Division of Information Technology (DIT) does not allow you to share your hardware token, as sharing a hardware token will lead to diminished security and effectiveness of the multi-factor authentication process associated with your account.
You only need one hardware token. The hardware tokens are portable and may be carried with you wherever you are working.
DIT will coordinate with departments to train and authorize ID Notaries who can perform the functions vital to multi-factor authentication (such as assigning hardware tokens and printing bypass codes) and establish a process so that departments can order tokens.
If you are no longer employed by the University of Maryland, system access and authorization will be revoked as part of the normal off-boarding procedure. Department staff must collect hardware tokens before separation from the university.
The department should contact the Service Desk at 301.405.1500 to have these tokens removed from your Duo account.
IMPORTANT: Hardware tokens run on a battery and have an expected life span of five years. After they no longer function, total replacement is of the hardware token is necessary.