If you have requested to be provided with a YubiKey USB device for the purposes of hardware authentication, the following guide is intended to walk you through the initial setup. Prior to following these steps, you will want to make sure to have the device on hand.

 

Provided is an image of what it looks like: 

 

 

 

 

Click Start the Process. This will open the Microsoft sign in screen. Enter your full RCBC email address, then click Next. 

            

 

Now enter your current BaronOne password and click Sign In to proceed.

            

 

When you see the ‘Let’s keep your account secure’ screen, click Next to set up multi-factor authentication. Leave this page open while you complete the next step.

            

---

Set Up Your New Multi-Factor Authentication

You will now be prompted to set up a Multi-Factor Authentication (MFA) method. 

 

          

 

Available MFA methods include:

• Microsoft Authenticator (recommended)
• Google Authenticator (Use the 'Set up a different authentication app')
• Phone call or text message (Use the 'Set up a different way to sign in')
  • You can enter your cell phone number to receive a text or call, or your RCBC direct dial number if you prefer not to use your cell phone. This phone option is temporary and only used to get you signed in so you can register your YubiKey.

     

    NOTE: To bypass using a phone number, please contact OIT to provide you with a Temporary Access Pass to sign into BaronOne. Once signed in with the temporary access pass, OIT will help guide you to add the YubiKey or you may continue on your own with this guide. 

---

 

When at the MFA set up screen, click “Set up a different way to sign in”.

 

 

Select “Phone”. Enter your cell phone number to receive a text or phone call. If you don’t want to use your cell phone, you can enter your RCBC direct dial number instead.

 

Follow the on-screen steps to finish signing in.

 

(This phone option is only needed to get you logged in and can be removed later.)

 

 

After signing in, you should see the Security info page. Click “+ Add sign-in method.”

 

 

Choose Security key.

 

 

Select USB device.

 

 

Insert your YubiKey into the USB port when prompted and lightly tap the sensor on the key. 

 

 

 

A Windows Security pop-up will appear. Enter a PIN and then click OK.

 

 

When asked, give the security key a name.

 

 

Click Done to return to the Security info page. Your YubiKey is now set up and ready to use.

 

Optional: Remove the phone option

If you want your Yubikey to be the only sign-in method:

• Find Phone on the Security info page.
• Click Delete next to it.

⚠️ Only remove the phone option after confirming your YubiKey works. Log out of your session and try signing in by using just the YubiKey.