at @ 
NCSA offers the Duo multi-factor authentication solution for the purpose of increasing the security of as a method of protecting and securing NCSA's resources.
Duo at NCSA accounts are available to all NCSA Kerberos account holders.
Duo enrollment process
...
Prerequisites
- NCSA Kerberos username and password
- Android or iPhone
- If you need a password reset, use the NCSA Identity service - https://identity.ncsa.illinois.edu/
- iPhone or Android phone with the Duo Mobile mobile app installed
- iPhone: https://itunes.apple.com/us/app/duo-mobile/id422663827?mt=8
- Android:
- if you do not have an available smart phone a hard token and be provided please contact help+security@ncsa.illinois.edu Android: https://play.google.com/store/apps/details?id=com.duosecurity.duomobile&hl=en
- iPhone: https://itunes.apple.com/us/app/duo-mobile/id422663827?mt=8
- If you do not have an available smart phone, a hard token can be provided by contacting Security
Enrollment Steps
- Visit Proceed to: https://duo.security.ncsa.illinois.edu
- Log in with your NCSA Kerberos username and password
- Use the NCSA Identity service you require a password reset - https://identity.ncsa.illinois.edu/
- If you experience any difficulties using the NCSA Identity and Access Managment Management site, please contact NCSA ITS: IST at help+its@ncsa.illinois.edu
- Follow the Duo process for enrollment
...
Duo at NCSA provides multiple methods to recover your acocunt in the case of the account if the smart phone you use used to register is no longer availablebecomes unavailable.
- You can register a Yubico U2F token using the Duo Portal, :
- U2F tokens only function with supported web browsers
- Create backup codes:
- You can generate and save 2 non-expiring backup codes.
- You are urged to write these down and place in a safe location or save into a password vault.
- NCSA can provided provide a Duo hardware token - :
- Please contact Security to be assigned one.
- https://guide.duo.com/tokens