DUO FAQ - General Setup and Use


How Do I Start Using 2-factor Authentication?

The first time you attempt to access a Virginia Tech service that requires 2-factor authentication, Duo will direct you to enroll a device that you can use for authentication using the interactive Duo web-based prompt. You won’t be able to complete the login process without completing this step first. Follow the on-screen prompts to set up your Duo authentication device.

As a new student or employee, after you create your VT Username you will automatically be directed to the Account Manager application (accounts.it.vt.edu) where you will be able to enroll in Duo.

How Many Devices or Factors Should I Enroll?

Enroll a minimum of two devices. That way if one is unusable, you can use the backup to continue accessing Virginia Tech 2FA websites.

What are all the options for devices I can enroll, and how do I choose between them?

During the Login process, Duo will select the most secure option based on your available devices and configuration. Listed below are the allowed Duo 2FA methods:

How Do I Add a New Device?
  1. When logging into a Virginia Tech 2FA protected website, enter your VT Username and Passphrase.
    1. When the Duo login screen is presented, click on "Other options." NOTE: if the 2FA screen is bypassed, open a new Chrome incognito / Edge inPrivate / Firefox private window and use that to log into the website you need to visit. This will allow you to see the options for managing devices.
  2. Follow the directions at Duo’s Add or Manage Devices After Enrollment.
Adding DUO Mobile After Setting Up With Biometric Thumbprint or Face Scan - Accessing Outlook

For users who have initially set up DUO with a biometric method such as a thumb print or facial scan, in order to sign in to your Virginia Tech Microsoft Exchange Email in Outlook, you will need to set up or reactivate DUO Mobile.

This process must be completed on the same device you previously used to authenticate with Face ID or fingerprint.

 

Duo Mobile Setup Instructions

 

Open an Incognito / Private Browser Window:

 

Once you have opened an incognito or private browser window, please follow these steps: 

  1. Visit https://onecampus.vt.edu and sign in.
  2. When the Duo two-factor authentication prompt appears, select “Other options” at the bottom.
  3. Choose “Manage Devices” from the list.
  4. Select a verification method (such as a text message, phone call, or bypass code) and complete the authentication.
  5. After successful verification, you will be taken to the Device Management Portal where your registered devices are listed.
    Click “Add a device” to begin the reactivation process.
  6. Select Duo Mobile and follow the on-screen instructions to complete setup.


    If you need assistance, please contact us at 540-231-4357. Please note that, to ensure account security, identity verification through a Zoom video call is required when resolving two-factor authentication issues. 
How Do I Get and Print Backup Codes from the Virginia Tech Web Site?
  1. Log in to the Virginia Tech accounts site at accounts.it.vt.edu.
  2. Use the left hand menu to navigate to the 2-Factor page.
  3. In the middle of the page, click Generate passcodes.
  4. To confirm that you understand the warning displayed, click Generate.
  5. On the webpage, click Print.
  6. Your printer settings will appear. Select the printer you want to use, and then click OK.
  7. Store the printed paper in a secure location, and use a pencil or pen to mark when you use each code. Each code can only be used once.
  8. Any Duo passcodes you previously printed from this Virginia Tech website will no longer work.
  9. Note that you have to be able to log into the accounts page in order to print backup codes. If you cannot authenticate with any second factor, follow the instructions at Lost, Forgot, Broke, or Unavailable 2-Factor Device instead of these instructions.
How Do I Reactivate the Duo Mobile App?
  1. In your browser, open a new Chrome incognito / Edge inPrivate / Firefox private window.
  2. When logging into a Virginia Tech 2FA protected website, enter username/password normally.
  3. When the Duo screen with the three-digit code is presented, click on Other options.
  4. At the bottom, click on Manage Devices.
  5. Complete the authentication with your second factor to proceed.
  6. Follow the instructions on the Reactivate Duo Mobile for an Existing Device page.
What Do I Need to do if I Got a New Phone with the Same Phone Number?