...

1. Know your NCSA Kerberos username and password.
   • If you need to reset your password, use the NCSA Identity service at https://identity.ncsa.illinois.edu/
2. Install the Duo mobile app on your iOS/Android device or obtain a security key.
   • To install on iOS, find Duo Mobile in the App Store.
     
     • For more information about Duo on iOS, see: https://guide.duo.com/iphone
   • To install on Android, find Duo Mobile in Google Play.
     • For more information about Duo on Android, see: https://guide.duo.com/android
   • To purchase a security key, visit: https://www.yubico.com/product/security-key-by-yubico
     • For more information about Duo's support for security keys, see https://guide.duo.com/security-keys
     • In some cases, NCSA can provide a Duo hardware token for you.
       • NCSA employees: contact help+duo@ncsa.illinois.edu.
       • Industry Partners: contact your Industry program representative.
       • LSST Staff: contact your project manager.
       • Blue Waters users: Contact the BW Project Office - help+bw@ncsa.illinois.edu
       • Others: please purchase a security key (e.g., https://www.yubico.com/product/security-key-by-yubico). 

Enrollment Steps

With the above prerequisites satisfied, follow these steps to enroll using your iOS/Android device or security key.

1. Visit https://duo.security.ncsa.illinois.edu in your web browser.
   • If using a security key, be sure to use one of the web browsers that support U2F (e.g., Chrome).
2. Log in with your NCSA Kerberos username and password.
   
   • If you have trouble logging in with your username and password, visit https://identity.ncsa.illinois.edu/ or contact help+its@ncsa.illinois.edu.
3. Select Launch Device Management Portal.
4. Follow the Duo process for enrollment. See https://guide.duo.com/enrollment for details.
5. Generate and save 2 non-expiring one-time-use backup codes.
   • Visit https://duo.security.ncsa.illinois.edu/ and select Manage Backup Codes and Tokens. Then select Generate replacement backup codes.
   • Write down the codes and place them in a safe location or store them in your password vault.
   • Whenever you use one of the backup codes, it is a good idea to generate 2 new backup codes, so you always have 2 backup codes available to use.
   In some cases, NCSA can provide a Duo hardware token for you
   • .
   • NCSA employees: contact help+duo@ncsa.illinois.edu.
   • Industry Partners: contact your Industry program representative.
   • LSST Staff: contact your project manager.
   • Blue Waters users: Contact the BW Project Office - help+bw@ncsa.illinois.edu
   • Others: please purchase a security key (e.g., https://www.yubico.com/product/security-key-by-yubico). 
6. (Optional) Add additional devices (phones, tablets, security keys).
   • Visit https://duo.security.ncsa.illinois.edu/portal, select +Add another device, and follow the instructions.

...