Body
Who is required to use two-factor authentication (2FA)?
Anyone with a NetID and password, including faculty, staff, students, retirees, visiting scholars, contractors, and departmental accounts will be required to use two-factor authentication.
I don't have a smartphone, or it is an older model. How do I use Duo?
UTHSC does have some hardware tokens that can be used for 2FA if you do not have a smartphone or a smartphone with an older operating system that Duo doesn't support. These tokens display a 6-digit number that changes every 30 seconds. You must have the token with you every time you sign into an application that uses DUO. You can by the Service Desk to get a DUO token. You will be responsible for keeping up with the token assigned to you.
Can I borrow a hardware token?
No. All UTHSC staff, faculty, and students must have their own Duo token.
How Do I Change Settings or Enroll Another Device?
Go to UT Password Management page and choose Manage Two-Factor Authentication. Log in with your NetID and password and authenticate with two-factor. Once you are in, you can add, modify, or delete a device and change your default preference.
I have a new phone, but I have never received a QR code. How do I reactivate Duo?
Go to 2fa.utk.edu/restore, log in with NetID and password, and then follow the instructions on the screen.
What devices are supported by Duo, and can I set up more than one device?
- Devices supported by Duo include the following:
During enrollment, you may see more device options. However, UTHSC does not currently support any other device except for what is listed.
You can set up more than one device by going to the UT Password Management page and choosing Manage Two-Factor Authentication. Log in with your NetID and password and authenticate with two-factor. Once you are in, you can add, modify, or delete a device and change your default preference.
How much data does a Duo Push use?
Almost none. 500 pushes to your device will use 1 MB of data in total. This is roughly equivalent to loading one webpage on your smart phone.
Does installing the Duo Mobile app collect data or give up control of my phone?
No. Duo Mobile has no access to change settings on your phone. Duo Mobile cannot read your emails, cannot see your browser history, and requires your permission to send you notifications. Lastly, Duo Mobile cannot remotely wipe your phone.
The only information Duo Mobile collects is to verify the security of your device. Collected data include your OS version, device encryption status, and screen lock. Duo uses this information to help recommend security improvements to your device, and you are always in control of whether you act on these recommendations.
If I have signed up for 2FA, can I sign up for the non-expiring password policy?
Yes! After signing up for two-factor authentication, go to https://uthsc.edu/password/ and change your NetID password to a new 12-16 character password, and you will no longer be prompted to change it.
Why does the Duo Mobile app need to access my camera?
Duo Mobile only accesses your camera when scanning a QR code during activation.
What if I get a notification from Duo that I did not request?
Use the “Deny” option if you did not initiate the request. UTHSC Security will investigate.
What if I don’t have a WiFi connection or cellular reception? (This includes international travel)
Tap the ˅ icon in the Duo Mobile app to generate an authentication passcode. You do not need an Internet connection or a cellular signal to generate these passcodes.
What if my push alerts aren’t coming through?
Try these easy troubleshooting steps for iOS and Android.
Still not working? Reactivate Duo Mobile.
Do I need two-factor authentication to log into my computer?
Only Office 365 and some system-wide applications, such as DASH, currently use two-factor authentication.
I left my phone at home and can’t log in. What should I do?
You have two options: 1) Return home and get your phone, or 2) contact the UTHSC Service Desk at 901.448.2222 for a temporary code.
Option 2 is only available Monday - Friday 7:30 am CT to 5:30 pm CT.
From 6:00 am to 7:30 am and 5:30 pm to 9:00 pm, the Helpdesk at UTK is available to assist in getting a temporary code. They can be reached at 865.974.9900 and are open 24 hours a day/7 days a week. The Helpdesk will need to verify your identity before providing a code.
My bank uses text messages for two-factor. Why isn't that an option?
Text messages and telephone calls are features within the system. However, they are an additional cost. Other universities using these features pay up to an additional $250,000/year. UT has elected to use the more secure Duo Mobile app instead of enabling text messaging and telephone calls.