Yubikey or FIDO2 Security Key Setup

1.Log in to myaccount.microsoft.com/ with your Jim2Cloud account (eg. joe.bloggs@company.jim2.cloud).

2.Approve the MFA prompt to complete the sign-in (if already enrolled for MFA)

3. Under Security info, click UPDATE INFO.

updateinfo

4.Select + Add sign-in method.

Select Security Key from the dropdown.

passkey

5.Select USB device.

6. Follow the prompts to enrol the Yubikey/FIDO2 Security Key.

7.If prompted where to save this passkey, select Security Key.

8. Click OK to confirm the Security key setup.

9. If a PIN is not already configured on the Yubikey/FIDO2 Security Key, you will be prompted to configure one.

Note: This security requirement is imposed by Microsoft, and is not optional or configurable.

10.You will be prompted to enter the PIN for the Yubikey/FIDO2 Security Key on each MFA prompt (currently every 90 days).

11. Enter the existing PIN, or enter a new PIN (minimum 4 digits) to secure the Yubikey/FIDO2 Security Key, then click OK.

12. Touch the Yubikey/FIDO2 Security Key when prompted.

13. If successful, click OK to continue.

14. Enter a descriptive name for the Security Key, then click Next.

14.To test the Yubikey/FIDO2 Security Key, click Sign out everywhere.

seckey11

15.In the Windows App, refresh the Apps list to trigger a sign-in.

seckey12

16.When prompted to sign-in, click Sign in with Windows Hello or a security key.

If prompted to select a Passkey, select Security Key, then click Next.

17.Enter the PIN configured on the Yubikey/FIDO2 Security Key, then click OK.

18. Touch the Yubikey/FIDO2 Security Key to complete the sign in.

19.The Jim2Cloud account will be signed in on the device for 90 days, at which point you will be prompted to present the Yubikey/FIDO2 Security Key again.

Note: You may receive an MFA prompt when unusual activity is detected. For example, if you sign in from a new device, a different state or country, or if your hardware setup changes significantly, this may trigger an MFA prompt. This proactive measure helps to ensure that even if your password is compromised, unauthorised access is still prevented.

20.If the device is compromised, contact Happen Support and request for the Yubikey/FIDO2 Security Key to be disabled and the login session signed out.