Last Revision: 02/07/2020

I. OBJECTIVE

In an effort to maintain the reputation, security, continuity, and technical oversight of university assets considered part of our overall catalog of services, the Office of Information and Resource Technology is issuing a new policy concerning domain names affiliated with Fairleigh Dickinson University. Affiliation with FDU is determined by OIRT in conjunction with the Offices of General Counsel and Communications and Marketing.

II. POLICY

All domain registrations that have an affiliation with the University must be registered through OIRT. An affiliation is defined as a domain that identifies the University as part of its naming nomenclature and houses content specific to the University or any function, whether administrative, academic, or student related to the University. To request a new domain, please complete the following:

Domain Transfer or Registration Request

You may also try emailing your questions to domainregistrar@fdu.edu.

In addition to the domain registration, ongoing certification renewals and any backend technical configurations will be managed by OIRT. All costs associated with the domain will be charged back to the department.

Any department that today independently manages/operates a University domain as defined above or has obtained a domain with any affiliation with FDU must notify OIRT of the existence of that domain so ownership can be moved over to OIRT management. Please contact OIRT by sending all available information to domainregister@fdu.edu. A member of OIRT will work with the department to move the ownership over properly. All content of any domain, as well as plug-ins or any other functionality of the domain, will be reviewed by OIRT but are the responsibility of the individual departments.

III. IN CASE OF QUESTIONS

All questions relating to the Domain Registration Policy can be addressed to the VP & CIO of Fairleigh Dickinson University.

---

This guide is designed to assist you in mastering both the classic and updated versions of the DUO Device Management Portal. It simplifies the process of modifying existing devices and integrating new ones into your multi-factor authentication setup.

Legacy DUO Device Management Portal

1. In a Desktop or Laptop browser visit the “DUO Management Portal“. You will be prompted to authenticate through SSO and complete the Multi-factor Authentication process

DUO Management Portal

2. After authenticating you’ll see the DUO Management Portal. This is where you can enroll new devices, reactivate, edit, or delete your existing devices

If you authenticate with more than one device, you can specify which you would like to be the default.

1. Click the “Default Device” drop-down menu and pick your default device for authentication. Click “Save” if you’re done making changes

2. You can choose which authentication method you prefer to use when logging in by clicking on the “When I log in” drop-down menu
   • Ask me to choose an authentication method: it will prompt you to select an option every time you log in
   • Automatically send this device a DUO Push: it will automatically send a DUO Push to your default device

1. Click on “Reactivate DUO Mobile” if you need to get DUO Push working on your phone, for example, if you replaced your phone with a new model but kept the same phone number.

2. After answering some questions about your device, you’ll receive a new QR code to scan with your phone, which will complete the DUO Mobile activation process

1. Click on “Change Device Name” to open up an interface to change the display name of your phone

2. Type in the new name and click “Save“

1. Click the “trash” icon button to delete a device

2. Confirm that you want to remove the device by clicking on “Remove“. The device will be deleted. It will no longer be able to approve DUO authentication requests.

To add a new authentication device, click “Add another device” link on the right side of the DUO Prompt. You’ll be taken to the new device enrollment prompt

You can use the DUO Quick Start Guide for instructions on how to enroll a new device

Updated DUO Device Management Portal

You can add additional verification methods, manage your existing devices, or reactivate DUO Mobile for DUO Push from the DUO Universal Prompt.

1. When logging in to an application with the Universal Prompt Click the “Other Options” link on the authentication page to view your list of available methods

2. Click on “Manage devices” at the end of the list to enter the device management portal

3. You will be prompted to verify your identity by completing the DUO Multifactor Authentication process. Select your preferred authentication method from the listed options to continue

• After approving a DUO authentication request you can see the Device Management Portal with all your registered devices.

To add a new method of verifying your identity in DUO, click “Add a device” and follow the enrollment process described in the DUO Quick Start Guide, starting on Step 3.

The difference between adding a new device from the Device Management Portal and during first-time enrollment is that when you have finished enrolling the new device you return to the Device Management Portal to view all your registered devices, including the new one, instead of continuing to log into an application.

1. Click the “Edit” button on the device you would like to rename or remove to view the drop down menu
   • Then click either “Rename” or “Delete“

2. When renaming a device, type the new name for your device, then click on “Rename” to save your changes

3. When Deleting a device, confirm your selection to delete

If you have replaced the phone you activated for DUO Push, you can reactivate DUO Push if you have the same phone number.

1. Click on “I have a new phone” for the device you want to reactivate

2. Click “Get Started” to continue

3. Click on “Send me a passcode” or “Call my phone” then proceed to follow the instructions prompted to complete the reactivation process

1. Let the DUO Push authentication time out

2. Click on the “I got a new phone” link shown in the Universal Prompt

• If you still use the same phone number as you did when you first set up the phone to use DUO Push, then click or tap the “Text me a link” button

• When the text message with the link arrives on your phone, tap it to automatically reactivate DUO Mobile on your phone to use DUO Push again. If you don’t have DUO Mobile installed be sure to install it before you try to open the activation link in the text message.

• If you are using a different phone number than the one you first set up, then press on “I got a new number“

3. Press “Continue” to proceed to the DUO Device Management Portal, where you can complete the steps to “Adding a New Device“ and set up DUO Push on the new phone

Two-factor Authentication

Two-factor authentication also referred to as multi-factor authentication, provides an additional layer of security when logging in to a website. Two-factor authentication is becoming the standard in cybersecurity. Google, Apple, and other services all have their two-factor authentication methods. In short, passwords are no longer sufficient in protecting our sensitive data; we’ve got to add another layer of security to our accounts.

FAQ’s for DUO Authentication

• What are my authentication options?
  • DUO Push – if you have the DUO Mobile App installed on your smartphone or tablet, you can receive a push notification. From the app, you can approve or deny the login attempt.
  • Passcodes via DUO Mobile App – If you have the DUO Mobile app installed, you can receive a single passcode by tapping the FDU logo in the mobile app. This code must be used immediately.
  • Passcodes via SMS (Faculty/Staff Only) – users can receive a one-time use code via text message. To get you a one-time code, click Enter Passcode, then click on the blue button “Text me new codes.”  These codes do not expire, and they are valid until used.    You do not have to have a smartphone for this option.
  • Phone Call (Faculty/Staff Only) – you can receive a phone call on your mobile phone or landline phone. The call will give instructions on approving or denying the login attempt.
• Is DUO Mandatory?

  DUO is required for all FDU Staff, Faculty, and Students.

• What are Passcodes?

  If you opt-out of the DUO Mobile Application push notifications, there are a variety of passcode options to utilize as your second verification method.

  • Passcodes via DUO Mobile App – If you have the DUO Mobile app installed, you can receive a single passcode by tapping the FDU logo in the mobile app. This code must be used immediately.

   

  • Passcodes via SMS (Faculty/Staff Only) – users can receive a one-time use code via text message. To get you one-time code click Enter Passcode, then click on the blue button “Text me new codes.”These codes do not expire, and they are valid until used. You do not have to have a smartphone for this option.

   

  • Temporary Passcodes – If you do not have your device with you, you can obtain temporary passcodes by calling the Fairleigh Dickinson University Technical Assistance Center (UTAC). Each of the passcodes can only be used once, and will expire in 7 days.
• What does “Remember This Device for 60 Days” mean?

  Selecting this option will allow you to bypass DUO authentication for the next 60 days. This only works if cookies are enabled, and you are logging in from the same computer and browser. You will still be prompted to verify once – with your username and password. You will not be able to access your settings on that particular browser during the 60 days. Please note that if you have tools or policies running that regularly delete or clean cookies, the remember me feature will not work. If you do need to access your settings (perhaps to add another device), just try another browser or visit the FDU Self-Service Portal. Remember me will not work if your browser is set to private browsing mode.

• How does “Remember This Device for 60 Days” work?

  The remember me feature relies on browser cookies. For remember me to work, your Internet browser must allow cookies to be stored. Visit your browser content settings to ensure cookies are being stored. Some departments on campus do not allow cookies to be stored. If the remember me feature does not work on your browser, check with desktop support in your area.

• Forgot your device?

  If you do not have your device with you, you can obtain a batch of temporary passcodes. To obtain a temporary passcode, call the Fairleigh Dickinson University Technical Assistance Center (UTAC).  Each of the passcodes can only be used once and will expire in 7 days.

  NOTE: If you have lost your device, please report it to the Fairleigh Dickinson University Technical Assistance Center (UTAC).  We want to ensure someone else does not maliciously authenticate your account with your device.

• Who can use DUO?

  DUO is available to all faculty,staff, and Students. At this time, DUO is not available to FDU retirees, past employees, or alumni.

• Can I use DUO without using Wi-Fi or Cellular data?

  Yes, the passcode option on the DUO app does not require WiFi or cellular connectivity, it even works on airplane mode. To use this option, visit the DUO app on your smartphone, and tap the key icon to obtain a passcode. Enter the passcode into the DUO prompt when logging into any website that requires DUO authentication.

• What Applications are Using DUO?

  DUO Authentication is required by any application the utilizes the university Single Sign-On (SSO) service.  Examples of some websites that require DUO authentication are listed below.

  • WebAdvisior
  • WebCampus
  • Office365 (Office365.fdu.edu)
  • Blackboard
  • Zoom
• I stopped receiving Push Notifications on from DUO Mobile, how can I re-enable it?

  You may have trouble receiving push requests if there are network issues between your phone and Duo’s service. Many phones have difficulty determining whether to use the Wi-Fi or cellular data channel when checking for push requests and simply turning the phone to airplane mode and back to normal operating mode again often resolves these types of issues, if there is a reliable internet connection available. Similarly, the issue may be resolved by turning off the Wi-Fi connection on your device and using the cellular data connection.

  Check the time and date on your phone and make sure they are correct. If the date and time on your phone are manually set, try changing your device’s configuration to sync date and time automatically with the network.

  iOS users can run a troubleshooting tool from within Duo Mobile version 3.32.0 or later. To run the tool:

  1. Open the Duo Mobile app on your iOS device and tap the Edit button in the top left of the accounts list screen, then tap the name of the account for you aren’t receiving push requests.
  2. Next, tap the Get Started button in the “Missing Notifications?” section of the “Account Details” screen.
  3. Duo Mobile performs the test. If any step fails, you’ll receive further troubleshooting suggestions. After taking the suggested actions, press “Run test again” to retry.

  The steps that Push Troubleshooting performs automatically are as follows:

  • Check device settings.
  • Check internet connectivity.
  • Check that the device can contact Duo’s cloud service.
  • Attempts to send a test Duo Push notification.

  Should none of these actions help, see the Duo Knowledge Base for additional iOS and Android troubleshooting steps.

  If you can’t get Duo Push working on your own, you can log in with a passcode generated by the Duo Mobile app and send a new activation link to your phone.

  If you’ve tried the suggestions here but can’t get Duo Push working or reactivate your device yourself, please contact the Fairleigh Dickinson University Technical Assistance Center (UTAC).

• What if I get a notification that someone is trying to access my account, but I didn’t request it?

  Press the red “X“ to deny access to your account, then promptly change your FDU NetID password.

• Is the DUO app available for iOS and Android devices?

  Yes! Visit the app store on your smartphone to download DUO Mobile.

  DUO for iOS >

  DUO for Android >

  NOTE: Google Play Services are required to receive push notifications on Android. Users without Google Play Services installed will have to “fetch” by swiping down in the DUO Mobile app.

• What if I get a new smartphone or device?
  1. If your phone number has not changed, login to FDU Self-Service Portal then choose the “Call my Phone” option.
  2. Choose your device from the list, and then click “Device Options” next to your phone.
  3. Next click the “Reactivate Duo Mobile” button (you will need to install the Duo app on your phone to proceed). Then follow the instructions to activate DUO Mobile on your new device.

  If you have a new phone number, you will first need to obtain a temporary passcode (see the ‘What are Passcodes?’ section above).

  1. Login to FDU Self-Service Portal and enter the temporary passcode.
  2. Click on “Add a new device.”
  3. Once you complete adding your new device, please delete the device you are replacing.
• Can I have DUO on more than once device?

  Yes, you can add devices by visiting your DUO settings. When you see the DUO prompt with the three notification options, click “Settings” at the top right.

  NOTE: If you are using the Remember Me for 60 days feature, you will need to visit FDU Self-Service Portal access your settings.)

  After you click Settings, click “Add a New Device“. You can register smartphones, cell phones, tablets, and landline phones.

• What can the DUO app access on my smartphone?

  The DUO smartphone application serves only to provide two-factor authentication. It does not access any personal information on your device, nor does it track your location. Learn more about DUO’s commitment to privacy on its website.

• What if I am asked for a ByPass Code?

   A “bypass code” is a temporary passcode created by an administrator for a specific user to access a Duo-protected application. These are generally, used as “backup codes,” so that enrolled users who are having problems with their mobile devices (e.g., mobile service is disrupted, the device is lost or stolen, etc.) or who temporarily cannot use their enrolled devices (on a plane without mobile data services) can still access their Duo-protected systems.

  A user must have a valid Duo authentication device enrolled (like a phone or iPad) to use a bypass code to authenticate. Bypass codes are not intended as a user’s only 2FA method.

  Bypass codes expire after being used the allowed number of times, or after an administrator-defined amount of time. Once a bypass code is created, the timeout and allowed uses cannot be extended.

  If you need a Bypass code please visit SAMI Support, where you can request additional information from UTAC or search our extensive IT knowledge base. While SAMI Support provides the quickest and easiest access for IT support, you can always contact UTAC by phone at (973) 443-8822 or email at fdutac@fdu.edu.

• Still have Questions about DUO?

  For additional support, please visit the Fairleigh Dickinson University Technical Assistance Center (UTAC).

DUO two-factor authentication adds a second layer of security to your FDU NetID. It requires two factors to verify identity. These factors include something you know – your FDU NetID and password, and something you have – a phone or passcode, to authenticate and gain access to your account on FDU services. Passwords alone no longer provide adequate protection against cyber hacking. DUO is required for all current FDU students.

Install DUO Mobile App

The DUO app is available for mobile phones and tablets. You can directly access the DUO Mobile Security App using these links:

Activate your DUO Account

1. In a Desktop or Laptop browser visit the DUO Management Portal to begin the activation process by enrolling your device. Activation requires scanning a QR code with the DUO app’s built-in scanner

DUO Management Portal

2. Duo prompts you to enroll the first time you visit the DUO Management Portal using a browser or a client application that shows the interactive Duo web-based prompt

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of DUO’s authentication devices (for example, Security Keys won’t work with Internet Explorer). For the widest compatibility with DUO’s authentication methods, we recommend recent versions of Chrome and Firefox.

3. Click “Start setup” to begin enrolling your device

4. Select the type of device you’d like to enroll and click “Continue“. We recommend using a smartphone for the best experience, but you can also enroll iPadOS and Android tablets

5. Select your country from the drop-down list and type your phone number. Use the number of your smartphone or cell phone that you installed the DUO Mobile Security App on in the Step 1

6. Double-check that you entered it correctly, check the box, and click “Continue“

7. Choose your device’s operating system and click “Continue“

8. Click “I have DUO Mobile installed”

• If you have not completed installing the DUO Mobile App in Step 1 please complete now by following the platform-specific instructions on the screen. After installing the app return to the enrollment window

9. Activating the app links it to your account so you can use it for authentication

10. On iPhone or Android, activate DUO Mobile by scanning the barcode with the app’s built-in barcode scanner. Follow the platform specific instructions for your device:

11. The “Continue” button is clickable after you scan the barcode successfully

• Can’t scan the barcode? Click “Or, have an activation link emailed to you instead” and follow the instructions

12. Once activated click “Continue” to complete registration

Configure Device Options (Optional)

1. You can use Device Options to give your phone a more descriptive name, or you can click “Add another device” to start the enrollment process again and add a second phone or another authenticator

• If this is the device you’ll use most often with DUO then you may want to enable automatic push requests by changing the “When I log in:” option and changing the setting from “Ask me to choose an authentication method” to “Automatically send this device a DUO Push” and click “Save“. With one of the automatic options enabled DUO automatically sends an authentication request via push notification to the DUO Mobile app on your smartphone.

2. Your device is ready to approve DUO push authentication requests. Click “Send me a Push” to give it a try. All you need to do is tap “Approve” on the DUO login request received at your phone

With DUO activated on your account, and with your device enrolled, you are ready to use DUO. When logging in, you will have two authentication options. Review the options below to determine what works best for you.

FDU NetID users who are logging into OKTA for the first time will be prompted to enroll using a browser or a client application that shows the interactive Duo web-based prompt.

1. Click on “Enroll” to continue

2. You will be redirected to verify with DUO MFA. Click on “Set up” then “Next” to continue

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of DUO’s authentication devices. For the widest compatibility with Duo’s authentication methods, we recommend recent versions of Chrome and Firefox.

3. Choose “DUO Mobile” as your verification method

4. Select your country from the drop-down list and type your mobile phone number. Use the number of your smartphone or cell phone that you installed the DUO Mobile Security App. Click on “Add phone number” to continue

5. Double-check that you entered your information correctly. Click on “Yes, it’s correct” to continue if the information is correct

6. Click “Next” if you downloaded the DUO app as instructed in the first step

• If you have not completed installing the DUO Mobile App please complete now by following the platform-specific instructions on the screen. After installing the app return to the enrollment window

7. Open the DUO Mobile app on your phone or tablet and add this account by scanning the QR code shown on-screen

8. When you receive confirmation that DUO Mobile was added click “Continue“

9. Once the setup is completed, click on “Log in with DUO“

Authentication Options

With DUO activated on your account, and with your device enrolled, you are ready to use DUO. When logging in, you will automatically receive a DUO Push but will also have the choice to select from “Other Options“. Review the options below to determine what works best for you.

These are the different ways in which you can use DUO:

Once you have activated DUO Authentication, Duo will automatically send a DUO Push to your registered device. Open the notification on your device, and you’ll see a green checkmark and a Red “x“. Simply tap the “Green Checkmark” to approve the authentication request and gain access to your account.

VPN users select the number corresponding to Push or type “push“. Users with multiple devices will need to include a number indicating desired device i.e. push2.

Once you have activated Duo Authentication, you can use the DUO mobile app to generate passcodes. This option does not require wifi or data, so this is a great option if you’re traveling or if you have limited or no cell/Internet service. Open your DUO mobile app, tap the FDU logo and it will reveal a passcode. During login, choose the enter a passcode option, enter the code and you’re in.

You can receive a one-time use code via text message. To get your one-time code click on “Text message passcode“. When you land on the text message page, it will show that a text message was just sent to you with a passcode.

VPN users select the number corresponding to SMS passcode or type “SMS“. Users with multiple devices will need to include a number indicating desired device i.e. sms2.

Click the “Phone call” option and DUO will call your phone. Answer the phone call from DUO and follow the voice instructions to log in to the application.

VPN users select the number corresponding to Phone Call or type “phone“. Users with multiple devices will need to include a number indicating desired device i.e. phone2.

If you do not have your device with you, don’t worry. You can contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for a temporary passcode. These passcodes can be entered in the DUO prompt on your computer.

How Do I Change Settings or Enroll Another Device?

You can use the DUO Management Portal to easily edit and add new devices. For instructions on how to access the DUO Management Portal, follow the steps using the link below:

DUO two-factor authentication adds a second layer of security to your FDU NetID. It requires two factors to verify identity. These factors include something you know – your FDU NetID and password, and something you have – a phone or passcode, to authenticate and gain access to your account on FDU services. Passwords alone no longer provide adequate protection against cyber hacking. DUO is required for all current FDU students. Please follow the steps below.

Install DUO Mobile App

The DUO app is available for Android, iOS and iPadOS. Use the links below to install DUO on your mobile device.

DUO Mobile App Setup

1. In a Desktop or Laptop browser visit the DUO Management Portal to begin the activation process by enrolling your device.  Activation requires scanning a QR code with the DUO app’s built-in scanner

DUO Management Portal

2. Duo prompts you to enroll the first time you visit the DUO Management Portal using a browser or a client application that shows the interactive DUO web-based prompt

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of DUO’s authentication devices (for example, Security Keys won’t work with Internet Explorer). For the widest compatibility with DUO’s authentication methods, we recommend recent versions of Chrome and Firefox.

3. Click “Start setup” to begin enrolling your device

4. Select the type of device you’d like to enroll and click “Continue“. We recommend using a smartphone for the best experience, but you can also enroll iOS/Android tablets

5. Select your country from the drop-down list and type your phone number. Use the number of your smartphone or cell phone that you installed the DUO Mobile Security App on in the Step 1

6. Double-check that you entered it correctly, check the box, and click “Continue“

7. Choose your device’s operating system and click “Continue“.

8. Click “I have DUO Mobile installed”

• If you have not completed installing the DUO Mobile App in Step 1 please complete now by following the platform-specific instructions on the screen. After installing the app return to the enrollment window

9. Activating the app links it to your account so you can use it for authentication

10. On iPhone, Android, and Windows Phone activate DUO Mobile by scanning the barcode with the app’s built-in barcode scanner. Follow the platform specific instructions for your device:

11. The “Continue” button is clickable after you scan the barcode successfully

• Can’t scan the barcode? Click “Or, have an activation link emailed to you instead” and follow the instructions

12. Once activated click “Continue” to complete registration

1. You can use Device Options to give your phone a more descriptive name, or you can click “Add another device” to start the enrollment process again and add a second phone or another authenticator

• If this is the device you’ll use most often with DUO then you may want to enable automatic push requests by changing the “When I log in:” option and changing the setting from “Ask me to choose an authentication method” to “Automatically send this device a DUO Push” and click “Save“. With one of the automatic options enabled DUO automatically sends an authentication request via push notification to the DUO Mobile app on your smartphone.

2. Your device is ready to approve DUO push authentication requests. Click “Send me a Push” to give it a try. All you need to do is tap “Approve” on the DUO login request received at your phone

With DUO activated on your account, and with your device enrolled, you are ready to use DUO. When logging in, you will have two authentication options. Review the options below to determine what works best for you.

There are two ways you can use DUO:

Push Notification

Once the DUO mobile app is installed, you can select to receive a DUO notification on your smartphone. Open the notification, and you’ll see a green checkmark, and a red X. Simply tap the “Green Checkmark” to gain access.

Passcodes

You can use the DUO mobile app to generate passcodes. This option does not require wifi or data, so this is a great option if you’re traveling or if you have limited or no cell/internet service. Open your DUO mobile app, tap the FDU logo and it will reveal a passcode. During login, choose the enter a passcode option, enter the code and you’re in.

If you do not have your device with you, don’t worry. You can contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for a temporary passcode. These passcodes can be entered in the DUO prompt on your computer.

To change settings or enroll another device, visit DUO Management Portal or any DUO-supported application. When you get to the DUO prompt, click the “Settings” button and choose to add a new device or access your settings.

DUO Management Portal

For commonly asked questions on using DUO, please visit the link below:

The “remember me” option is displayed by Duo when you sign in with FDU NetID on the web. After providing your second factor for authentication, Duo will present you with a prompt asking if you would like to have this device remembered for future logins. Selecting “Yes, this is my device” sets the “remember me” status for Duo.

Use the “remember me” option to reduce how often you have to sign in with two-factor authentication (2FA) on the same web browser. It’s safe to use on trusted computers and lasts for 30 days.

Refer to our Duo Quick Start Guide below for instructions on using the “remember me” option within the context of the overall sign-in experience.

What is the “remember me” option?

The “remember me” option is a feature of Duo that tells your browser to remember that you have confirmed your identity using your 2FA device. If you confirm that “Yes, this is my device” when authenticating with Duo, you won’t have to use your 2FA device as often on that browser. For example, if you use it on your computer at work, it reduces how often you have to sign in with 2FA at work; but your laptop at home will still ask you to sign in with 2FA.

Why would I want to use it?

The “remember me” option saves you time and reduces distraction by reducing how often you have to use your 2FA device. If you routinely use the Duo callback method, it also saves the FDU money in telephony costs.

Is “Remember Me” safe? Doesn’t it defeat the purpose of 2FA?

The “remember me” option is safe to use on computers and devices that you can trust to protect your browser. It doesn’t defeat the purpose of 2FA because the convenience it provides is limited to each computer and browser that you choose to use it on. If you or anyone else tries to sign in with your FDU NetID on a different computer or browser, 2FA will be required.

How long does it last?

The “remember me” option lasts 30 days. It saves a secure cookie on your browser to track the time until you need to use your 2FA device again. If your browser clears cookies this will remove “remember me” until you re-select it.

Why is the “remember me” duration 30 days?

30 days is the current “remember me” duration because it is often enough to remind you that 2FA is turned on, but not so often to be annoying. While some institutions use shorter or longer durations, 30 days is a common duration at peer institutions.

How do I clear it on my current browser?

If the “remember me” option is enabled on the browser you’re using right now, clear your cookies for duosecurity.com. To clear it on other browsers, repeat this process on each of them.

How do I reset it on a browser I no longer control?

If you enabled the “remember me” option on a browser you no longer control, Please open a support ticket by clicking Support at the top of the page, or visiting samisupport.fdu.edu.

I’m using the “remember me” option, and I still have to use my 2FA device more often than every 30 days. Why is that?

Some system owners require you to reauthenticate with 2FA every time you access their systems for security, regardless of using the “remember me” option (workday for example). This can increase how often you have to sign in with 2FA. If you find you are regularly asked for 2FA on some sites despite the “remember me” option, but not other websites this is likely the cause. Other contributing factors include how many different computers you use, how many different browsers you use on these computers, whether or not you use the “remember me” option on all of them, how your browsers are configured to use cookies, and how often you clear your browser cookies.

Why do some system owners override the “remember me” option and reauthenticate me every time I sign in?

System owners decide to reauthenticate you based on what institutional and personal data they need to protect, and what threats and risks they need to guard against. Some of them reauthenticate you because they are concerned about unauthorized access from unattended browser sessions, and forcing you to reauthenticate is one way to re-establish that it’s you.

Why isn’t the “remember me” option working for me? Are there things that prevent it from working correctly?

The “remember me” option requires the use of browser cookies, so it may not work as expected in these circumstances:

• You are accessing a site that overrides the “remember me” option
  
• You cleared your browser cookies
  
• You started using a different browser
  
• You started using a different computer or device
  
• You are using a private browsing mode
  
• You disabled the use of browser cookies
  
• Your browser doesn’t allow cookies to be saved
  
• You use a browser extension that blocks cookies

Who will be affected?

This may affect FDU community users using Windows 7, Windows 8.1, Android Devices with Android OS version 9 or lower, and Apple devices with iOS versions that don’t support TLS 1.2.

Check if you are using the supported endpoints by reading the information below:

Windows

Supported Windows operating system (OS) versions will support TLS 1.2 by default. If you are running a supported Windows OS, no action is required.

Unsupported Versions for Windows Operating Systems

Check OS Version

• Open the Windows Search box and type “About your PC” and click on “Open“
• Under Windows Specifications, check which edition and version of Windows your device is running

Enabling TLS 1.2 on your Operating System

If your operating system was manually changed to disable TLS 1.2 for some reason, you can verify or configure your system for TLS 1.2.

Before making any changes, create a backup of the registry:

1. In the Windows Registry Editor, locate and click the “Protocols registry key” or “subkey“
   that needs to be backed up
2. Click “File”, then “Export”
3. In the Export Registry File dialog box, select the filename and location of where to save the backup
4. Click “Save”

After creating a backup of the registry, follow the steps below to enable TLS 1.2 on your system:

1. Click the Start menu, type “regedit” and press the Enter key. The Registry Editor window should be opened.
2. Navigate to follow the registry path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
3. Check if the subkey of TLS v1.2 is enabled for both the server and the client. Each protocol’s state is controlled by two keys: Enabled and DisabledByDefault
4. Make sure the Enabled value is 1 and the DisabledByDefault value is 0 or missing, the protocol is enabled.
5. If the Enabled value is 1 but the DisabledByDefault value is 1, the protocol is disabled by default – it will not be used unless another host explicitly requests it during negotiation.
6. If the Enabled value is 0, the protocol is disabled
7. Restart the system to ensure the new settings take effect

DUO Mobile

Supported Duo Mobile applications running on supported OS versions will support TLS 1.2+ by default. If you are running a supported Duo Mobile application on a supported OS, no action is required.

• Supported Android OS versions: Android 10.0 and greater
• Supported iOS versions: iOS 14.0 and greater

Web Browsers

Common web browsers like Google Chrome, Microsoft Edge, Mozilla Firefox, Opera, etc. with their latest version are supporting TLS 1.2.

Chrome and Microsoft Edge

1. In the Windows menu search box, type “Internet Options”
2. In the Internet Properties window, on the Advanced tab, scroll down to the Security section
3. Make sure the “User TLS 1.2” checkbox is checked

4. Click “OK” and restart the browser

Mozilla Firefox

1. Open the Mozilla Firefox Browser
2. In the address bar, type “about:config” and press “Enter“
3. In the Search Field type “tls”. Find and double-click the entry for “security.tls. version. min”
4. Make sure the integer value is 3 to force a minimum protocol of TLS 1.2

5. Click “OK” and restart the browser

We understand that upgrading your device is not always an option. In these instances, you can still use Duo Passcodes to perform multi-factor authentication.

1. To use this method, select “Enter a passcode” upon receiving your browser’s Duo security prompt

2. Next, open the Duo app and click “Show”. This will provide a six-digit passcode which you can enter into the browser prompt

3. Enter the six-digit passcode from the DUO app and click “Log in”