Account Access - Set Up a FIDO2 Security Key for Your SIUE Account
A FIDO2 security key is the right choice if you do not have a smartphone, your device does not meet the minimum OS requirements for passkeys, or you prefer a hardware credential that works on any computer you plug it into.
Have a smartphone? Registering a passkey on your phone is simpler and costs nothing. See Account Access - Register a Passkey for Your SIUE Account instead.
Step 1: Select a Compatible Key
Not all security keys work with Microsoft Entra ID. Before purchasing, confirm the key meets all of the following requirements:
- FIDO2/WebAuthn certified — the key must support the FIDO2 standard. This is listed in the product specifications.
- PIN or biometric protection — the key must support a PIN or built-in fingerprint sensor. Keys that do not require verification are not compatible with SIUE's account configuration.
- Correct connector type — match the key's connector to the ports on the computers you sign in from most often:
- USB-A — the standard rectangular USB port found on most older desktops and laptops.
- USB-C — the smaller oval port found on newer laptops and Macs. Some keys support both USB-A and USB-C.
- NFC — tap the key against your phone or an NFC-enabled device instead of plugging in. Useful if you sign in on multiple device types.
Keys confirmed compatible with SIUE's Microsoft Entra ID configuration include the GoTrust Idem Key and the YubiKey Security Key Series. Both are available for personal purchase through major retailers. If you are unsure which key fits your situation, contact the ITS Help Desk before purchasing.
Faculty and staff: Check with your department regarding purchasing procedures before ordering.
Students: Security keys must be purchased personally.
Step 2: Set a PIN on Your Key
Before registering your key with your SIUE account, you must set a PIN on the key itself. This PIN protects the key — without it, someone who finds your key cannot use it to sign in.
- Plug your security key into a USB port on your computer.
- Open Microsoft Edge or Google Chrome.
- In the browser address bar, go to
edge://settings/passwords(Edge) orchrome://settings/securityKeys(Chrome). - Select Set up a PIN or Create a PIN and follow the prompts.
- Choose a PIN you will remember — you will need it each time you use the key to sign in.
If your key has a built-in fingerprint sensor, follow the manufacturer's instructions to enroll your fingerprint in addition to setting a PIN.
Step 3: Register Your Key with Your SIUE Account
- Open Microsoft Edge or Google Chrome and go to
https://mysignins.microsoft.com/security-info. - Sign in with your SIUE email address, password, and your current sign-in method.
- Select Add sign-in method.
- Select Passkey from the dropdown, then select Add.
- When prompted to choose where to save your passkey, select Security key.
- Insert your key into a USB port (or tap it against an NFC reader if your key supports NFC) when prompted.
- Enter your key's PIN when prompted, then touch the sensor or button on the key to confirm.
- Enter a name for your key (for example,
YubiKeyorGoTrust Key) and select Done.
Your key is now registered. Unlike passkeys stored on a phone, your FIDO2 key works on any computer you plug it into. No Bluetooth required.
Step 4: Sign In with Your Key
Once registered, this is how you use your key to sign in. Select your key type below.
Sign In with a USB Key
- On the sign-in screen, enter your SIUE email address and select Next.
- When prompted for a sign-in method, select Sign in with a security key. If you do not see this option, select Sign in another way first.
- Insert your security key into a USB port when prompted.
- Enter your key's PIN.
- Touch the sensor or button on the key when it flashes or blinks.
Sign-in completes automatically after you touch the key.
Sign In with an NFC Key
- On the sign-in screen, enter your SIUE email address and select Next.
- When prompted for a sign-in method, select Sign in with a security key. If you do not see this option, select Sign in another way first.
- When prompted, hold your NFC key against the NFC reader on your device. On most phones, the NFC reader is near the top of the back of the device.
- Enter your key's PIN when prompted.
- Tap the key again if prompted to confirm.
Sign-in completes automatically after the key is read.
Confirm Your Key Is Registered
- Go to
https://mysignins.microsoft.com/security-infoand sign in. - Confirm your key appears in the list — it will show the name you gave it (for example,
YubiKey). - Confirm Microsoft Authenticator is also listed. ITS strongly recommends keeping Authenticator registered alongside your key, see the limitation below.
If the key does not appear, return to Step 3 and try again. If registration fails repeatedly, contact the ITS Help Desk.
Important Limitation: Password Reset
FIDO2 security keys cannot be used for self-service password reset. If your security key is your only registered sign-in method and you forget your SIUE password, you will need to contact the ITS Help Desk in person or by phone to regain access.
To avoid this, keep Microsoft Authenticator registered on your account as a second method. Authenticator supports self-service password reset and gives you a backup if your key is lost or damaged. See Account Access - Set Up Microsoft Authenticator for Your SIUE Account
Need Additional Support?
If you have any questions or need further assistance, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!