YubiKeys are being issued to users as part of our transition to stronger, phishing-resistant multifactor authentication.
As you receive your YubiKey, please remember that it is a security credential and must be protected accordingly. Your YubiKey should be treated with the same level of care and protection as your HSPD-12 badge.
Please keep the following in mind:
- Keep your YubiKey in your possession or appropriately secured when not in use.
- Do not share or loan your YubiKey to anyone.
- Do not leave your YubiKey unattended or connected to a computer when you are away from your workstation.
- Do not attach identifying information, passwords, PINs, or other authentication information to the YubiKey.
- Immediately report a lost, stolen, or damaged YubiKey in accordance with established reporting procedures.
- If you find a YubiKey that does not belong to you, turn it in rather than attempting to use it or identify its owner yourself.
Think of your YubiKey the same way you think of your HSPD-12 badge: it is an authentication credential that provides access to organizational systems and should be protected at all times.
Additional instructions will be provided as YubiKeys are distributed and activated.
Thank you for helping us keep our systems and information secure.
