Eligibility Requirements

Users are eligible for YubiKey tokens provided by the Division of IT when they meet all of the follow criteria:

1. Users are employed by the University
2. Users have access to critical or sensitive data (this would include Direct Deposit information, personal Banner data, etc.)
3. Users are unable to use any one of the approved 2FA methods outlined in this KB Article. 
   1. Users do not have a smartphone or tablet for Duo Mobile or any other software based 2FA authenticator AND
   2. Are not issued a computer with biometric capabilities AND
   3. Cannot provide a personal device for 2FA
4. Users have requested support through their local IT support or Department leadership

Users who fall outside of these requirements will not be eligible for a Division of IT provided Token. Users with little or no access to sensitive data should work with their department IT support to use one of the other approved methods for authentication.  D100 devices remain available for purchase through the software distribution center and should be utilized by departments or individuals when applicable.

Departments which receive Yubikeys will maintain responsibility for those devices moving forward as they would with any device purchased through state funds.  

Request process

Departmental IT staff or leadership should request the Enhanced 2FA offering through ServiceNow.  During this process they will provide a brief description of the specific users and use case which requires additional support. Consultations will be scheduled with the requestor to discuss the specifics.  You may request this via the Enhanced 2FA request item here: https://4help.vt.edu/sp?id=sc_cat_item&sys_id=33fd7fbb1b8082507dcddb1fdc4bcb2f 

When Yubikey distribution is required to meet the needs of the use case the requestor or the user or a representative from their IT department may retrieve the Yubikey from the Software Distribution Center in the Torgersen Bridge.