Good afternoon, all.

Today I need to let you know about an upcoming change to how we will authenticate using Duo. If you are already using the Duo Mobile app, you are good to go. Otherwise, please visit the link below for more information about how this change will affect you.

Important Upcoming Change

• Two-Factor Authentication (2FA) Methods
  • UTSA/UTK’s OneIT has announced that beginning August 4, it is changing two of the current two-factor authentication methods.
    • Duo bypass codes will be available only for short-term, temporary access and should no longer be used for regular logins.
    • OneIT will no longer distribute legacy hardware tokens, e.g., the OTP c100 tokens that were given to those who did not have a compatible smartphone.
  • OneIT has said that bypass codes are intended for temporary access and are less secure than Duo Mobile or a FIDO security key.
  • Duo Mobile is an app that runs on your smartphone and allows for convenient 2FA approvals on your iOS or Android device.
  • A FIDO (Fast Identity Online) security key is a physical hardware device used for secure, phish-resistant authentication and must be carried with you and plugged into your USB port.
  • If you are using the legacy hardware token, please keep in mind that the battery is likely nearing its end, so you will need to decide if you want to use a smartphone or purchase a FIDO security key.
  • OneIT recommends Duo Mobile as your primary method of authentication, but if your smartphone does not support Duo Mobile then you can visit Upcoming Changes to Two-Factor Authentication Methods | Office of Innovative Technologies for more information.
  • Should you purchase at FIDO key, it is crucial to purchase one as described on the above site.
  • If you have questions, please contact the OIT HelpDesk at (865) 974-9900.

Thank you so much for all you do to protect the Institute, its data, students, employees, clients, and yourself!

Sandy

Important Note: Thank you so much for sharing these e-newsletters with family, friends, clients, students, and anyone else who may benefit from the information. I would like to stress that you should keep your students in mind, as non-employee students will not get this information without someone sharing. If anyone has an email group for students who are not employees of your department, please let me know what that address is, and I can include it. I do this as a blind copy so student names and addresses will not show up!