General Questions
It is the use of two independent means of evidence (factors) to assert the identity of a user requesting access to some application or service to the organization that provides the application or service. The objective of two-factor authentication, as a method of electronic computer authentication, is to decrease the probability that the requestor is not who he/she claims to be.
Any person who has used an ATM machine to withdraw cash for a bank account has used two-factor authentication – you had to provide something you had (a card) and had to provide something you know (a PIN) in order to complete the transaction.
Privacy, and the threat of identity theft, is increasingly a concern as more personal information finds its way to online applications. In addition, passwords alone can frequently be easily guessed or compromised through phishing or hacking. Consequently, the password no longer provides adequate protection for mission-critical information system and applications containing personally identifiable information (PII).
With increasing security attacks across higher education institutions, passwords alone are not a sufficient way to protect resources. Two-factor authentication decreases the risk of compromise because a hacker would need to acquire the thing you “have” as well as the thing you “know.”
Protecting our students, faculty, staff, data, systems, and assets against cyber threats is a priority for Tarleton State University. Two-factor authentication (Duo) is a key component of our plan to secure the campus IT infrastructure and comply with Texas A&M System Regulation 29.01.03.
Any Tarleton faculty, staff, student, or designated affiliate who needs to have access to a system or service that is protected by Duo two-factor authentication will eventually need to use the service.
Yes. You do not need to reinstall the Duo app, but you must go through the enrollment process for Tarleton.
The only data that Duo stores for a user is the subscriber’s NTNET (Duo does NOT know your NTNET password) and information about your second factor, such as a phone number (if using a phone for the service) or the serial number of your hardware token (if not using a phone for the service). If you do not have a hardware token and are interested in using one, contact your administrator about acquiring a token and refer to the Guide to Two-Factor Authentication for instructions on how use Duo with it.
Using Duo With Your Phone
A smartphone is the best choice since it provides the greatest level of security and allows you to use the Duo Mobile App. The app generates passcodes for logging in and can receive push notifications for easy, one-tap authentication.
However, a smartphone is not required to use the service.
Yes, any cell phone will work, but it will not include the advantages of the app (passcodes, prompts, etc.). Cellular phone charges may result due to call back and authenticate (depending on the client’s phone service).
You may use a landline instead of a mobile device; however, take into consideration the stationary nature of a landline. Even if you work almost exclusively at your desk in your office where the landline is located, you might need access to Duo protected services from home or from a remote location.
You can set up Duo two-factor authentication on multiple mobile devices (phones, tablets, etc.).
Text messages and voice calls are sent only when you request them. They would be billed by your carrier in the same way that any other text message or call would. Tarleton will not reimburse you for these charges. If the charges related to the use of Duo exceed a level that you are comfortable with, consider switching to a hardware token rather than a cell phone for the service. Contact your administrator about acquiring a hardware token and refer to the Guide to Two-Factor Authentication for instructions on how use Duo with it.
Using Duo on your phone is perfectly safe, and a smartphone is the preferable device to use for a number of reasons (app being available, calling prompts, less to carry around and keep track of, etc.). In other words, a phone (especially a smartphone) is the preferred method.
However, a hardware token is available for use instead of a phone.
Yes. You can change to a different phone with a different number. You must reactivate Duo on the new device. If it is a different type of device (for example, if you are switching from Android to iPhone), you must select the new phone type before reactivating.
The app requests access to the camera. This allows the QR code to be scanned during the activation process. Duo does not access your other apps or other data on your phone. It uses some base functionality of the phone and a certificate that identifies your phone to ensure accurate identification.
Call the ITS Help Desk immediately if your phone is lost or stolen at (254)-968-9885. The ITS Help Desk will assist with disabling Duo for authentication and will assist you in logging into your account using a secondary device.
Remember: Your NTNET and password (first-level authentication) will continue to protect your account even if your phone is lost.
Troubleshooting
If you are using a cell phone that is not a smartphone, select “Other” as type.
If this is the first time you have used the service on a particular phone, make sure that the enrollment process has been completed. You will know it has been completed when you have chosen an authentication method (Duo Push, answering a call, or entering a code sent through text). If the enrollment process is complete, call the ITS Help Desk at (254)-968-9885.
If you have used the service on this phone before and cannot login, make sure that the phone is not locked. If the phone is unlocked, you may need to restart the mobile device, and try again.
Make sure that you are using the correct mobile device. If you are using a new device (even if you have the same phone number), then reactivate Duo Mobile for the new device.
If you are changing types of phone (Android to an iPhone), select the new type of phone before reactivating.
If the service is still not working, call the ITS Help Desk at (254)-968-9885.
If you are using a hardware token is not working, try to re-sync the token. Call ITS Help Desk for assistance with this process.
If you have stopped receiving push notifications, check the network connection on your device.
Try enabling and disabling airplane mode.
Try turning Wi-Fi off and resending yourself a push message.
If you are still experiencing issues, call the ITS Help Desk at (254)-968-9885.
DUO should prompt once after implementation when accessing your Tarleton email and, then,every time you change your NTNET password.