Setting up the YubiKey to use the Yubico Authenticator App
Currently the YubiKey Series 5 hardware token cannot interact directly with Microsoft Office products on the Macintosh, so you need to use the Yubico Authenticator App to generate a code that you can then enter into Outlook, Teams, or whatever you are using that requires login. To set this up you need to install the Yubico Authenticator, which is available here:
https://developers.yubico.com/yubioath-desktop/Releases/yubioath-desktop-latest-mac.pkg
Once you download and install that go here in your web browser:
https://aka.ms/mysecurityinfo
Sign in with your CWU credentials and then (if it doesn’t take you there directly) click on Security Info on the left hand side:
Now choose Add method:
Then Authenticator App:
Now click I want to use a different authenticator app:
Then hit next. This will bring up a window with a QR code in it. Now launch the Yubico Authenticator app that you installed earlier (it will be in your hard drive then Applications). You should see a window asking you to insert your YubiKey.
Plug in your Yubikey. If you see a message that your computer is unable to identify the keyboard you just plugged go ahead and cancel it. Also if it asks you to grant permission to the Yubico Authenticator app in system preferences go ahead and do that. Now make sure the QR code in the web browser window is visible on your screen and return to the Yubico app (Note: if it asked you to grant permissions to it and you did you may need to relaunch the application and remove/reinsert your Yubikey at this point) and click the Add button.
It might ask for permission to record your screen; if it does allow it and then relaunch the Yubico application again (if you have to relaunch the app then you will need to click the Add button again). The Yubico app will fill in your information automatically. Click Add again. Now the account will be associated with the Yubico Authenticator app. Double click the key you just added and touch the gold button on the key so it will generate a 6 digit code.
Return to the browser window, hit next, enter the code, and hit next. The Yubico Authenticator app will now be associated with your CWU MFA account. You can close your browser windows and quit the Authenticator app now.
Using the Yubico Authenticator app for MFA Verification
To use the Yubico Authenticator for MFA verification you will launch the app, plug your key into your computer, double click the key in app window, and touch the key to generate a code.
Now launch whatever application you need to use and sign in with your CWU credentials. You may have multiple options for MFA verification depending on how your account is setup, but one option will now be the Yubico Authenticator app. If it is not your default verification option then you will need to click on Sign in another way in the verification window:
Then choose Use a verification code from my mobile app:
Enter the code generated by the Yubico Authenticator app:
And hit Verify. You are now authenticated and can use your application like normal.