Enrollment
- Ensure YubiKey is plugged in.
- Ensure Yubikey has default MGMT pin, if not run the following command:
ykman piv access change-management-key -m <MGMKEY> -n 01020304050607080102030405060708010203040506070
- Ensure Yubikey has default MGMT pin, if not run the following command:
- Remote desktop to enroll02.ad.rit.edu
Multi-factor with DUO
- Double-click on the Autoenroll.bat
- Enter PIN when prompted. When complete, the command prompt window will go away.
Change PIN (if default)
- Send Ctrl-Alt-Del through RDP (Ctrl-Alt-End) and click on Change a password
- Click on Sign-in options and then Smart card
- Enter the default PIN and your new PIN