Two-factor Authentication now required for HSC users

Due to the recent email phishing attacks, HSC will move forward with using two-factor authentication this month. This will be a mandatory requirement effective January 24th. Two-factor authentication is a second layer of security besides your password. It requires you to confirm your identity with two things – something you know and something you have. Two-factor authentication will also help WVU comply with new regulatory standards and reduce the risk of data breaches. More than 60 percent of confirmed data breaches today involve weak or stolen passwords. As you can imagine, a large security breach of personal data could result in big costs to the University.

January 24th, two-factor will become a requirement for accessing many critical web-based systems containing sensitive and private data, including Office 365 Web Access, SOLE, WVU+kc, SEI, Portal, DegreeWorks and other WVU systems.

order to maintain your compliance, please review this FAQ and follow the instructions listed below for specific details on how to set this up. If you have any questions on the setup process, please contact the HSC Help Desk at hsc_helpdesk@hsc.wvu.edu or 304.293.3631.

Where will two-factor authentication be required:

  • Two-factor authentication will be required if you connect to the HSC student or WVU.Encrypted (wireless) networks. This also includes the HSC instructor computer in HSC Classrooms.
  • Two-factor authentication will be required if you connect to systems from off-site locations
  • Two-factor authentication will be required if you travel elsewhere on WVU campuses

Please note that HSC users will not be required to use two-factor authentication from our internal (wired) networks because we have hardware controls already in place for security.

  • Includes Morgantown, Charleston and Eastern campuses
  • Includes HSC managed off-site locations (CED, CPRC, ICRC, RDTP)
  • Includes Ruby Memorial Hospital and WVUH clinics

What you need in order to get setup:

  • You will need to use your smartphone (recommended) as your second-layer authentication device.
  • If you do not have a smartphone, then a Duo Display Token is available for purchase at $20 at the website listed below. WVU also has a YubiKey available for purchase, however, due to limited browser compatibility and clinical enterprise security measures HSC is not recommending the YubiKey.

How do I setup my account for two-factor authentication:

To activate your Smartphone as your second-layer authentication device (RECOMMENDED):

To purchase and activate the Duo Display Token (Recommended ONLY IF you do not have a Smartphone OR require a second authentication device):

What happens if I don’t have my Smartphone or authentication device available:

Users can generate Bypass codes that will allow you to authenticate with Duo if you do not have your phone or authentication device available. You can generate ten codes at once at login.wvu.edu and each code can only be used once. These codes should be kept in a safe location. If you generate new codes, all old codes will become invalid. See detailed instructions for generating bypass codes.

When will two-factor authentication be required:

  • HSC users should begin the enrollment process now. Mandatory use of two-factor authentication by HSC users will be effective 7am, January 24, 2018.
  • Windows, macOS and Linux users must authenticate using two-factor no later than January 24
  • iOS and Android native applications (email, calendar) will not require two-factor authentication
  • Students will not be required to use two-factor authentication until the fall 2018 semester
  • WVU main campus ITS is in process of implementing two-factor authentication for faculty and staff university-wide over the spring semester

Please note that after you complete the enrollment process, the following systems will require two-factor authentication immediately:

  • HSC Office 365 Web Access
  • Wireless (WVU.Encrypted)
  • HSC Classroom instructor PC
  • WVU+kc
  • SEI
  • Portal
  • DegreeWorks

SOLE and other systems will require two-factor authentication in the coming weeks.

Technical Support:

HSC users should contact the HSC Help Desk at hsc_helpdesk@hsc.wvu.edu or 304.293.3631 for any questions on setup. Additional helpful FAQ on setup is available at twofactor.wvu.edu