How-To: Set Up Your Security Key with Keytos Connect

Learn how to onboard your new security key, such as a YubiKey, in Keytos Connect by signing in with your work or school account or by verifying your identity with a government ID.

Overview - How Do I Set Up My Security Key?

When you get a new security key from your workplace or school, such as a YubiKey, you set it up in Keytos Connect. Keytos Connect puts your work or school credentials on the key so you can use it to sign in.

You can prove who you are in one of two ways, depending on what your organization allows:

  • Entra ID: Sign in with your existing work or school account. Use this if you can already sign in.
  • Government ID: Verify your identity with a government-issued ID and your phone. Use this if you’re new and don’t have a working account yet, or if you’re locked out.

Before You Begin

  1. Install Keytos Connect on your computer.
  2. Have your new security key ready.
  3. If you’re using a government ID, have your ID and a smartphone with a camera ready.

Step-by-Step Guide - How to Onboard Your Security Key in Keytos Connect

Use the tabs below to follow the steps for how you’re verifying your identity.

How to Sign In with Your Work or School Account

  1. Open Keytos Connect, enter your work or school email under Enter your email to begin, and click Begin.

  2. Under Select your authentication method, click Microsoft SSO, and complete the sign-in in the browser window that opens.

    Keytos Connect Select your authentication method screen with Microsoft SSO highlighted

How to Install Your Identity on Your Security Key

  1. Plug your security key into your computer.

  2. In the left-hand menu, click Identity management.

    Keytos Connect left-hand menu with Identity management highlighted above Wi-Fi profiles

  3. Click Install an identity.

    Keytos Connect Identity management page showing the connected YubiKey, with the Install an identity card highlighted

  4. Under Please confirm the security key and identity, check that the Model and Serial number match your key, and that Identity shows your work or school account.

    Keytos Connect Install an identity screen with the security key model, serial number, and work or school identity highlighted

  5. Under Enter the PIN of the security key, enter your key’s PIN. If you don’t know it, click Forgot PIN? Reset the key. Then check the box to confirm that all existing certificates on the key will be cleared, and click Install. Existing FIDO2 passkeys on the key aren’t affected.

    Keytos Connect Install an identity screen with the PIN entered, the confirm certificates will be cleared checkbox checked, and the Install button highlighted

  6. Keep your security key plugged in, and touch it each time it blinks until Keytos Connect finishes installing your credentials.

  7. Keytos Connect shows Security key onboarding completed.

    Keytos Connect Security key onboarding completed notification after installing your identity on the security key

  8. On the Identity management page, your security key shows as Connected, with its Model and Serial number. To see what’s on it, click About this key.

    Keytos Connect Identity management page showing the YubiKey 5 USB C NFC with the Connected badge highlighted after installing an identity

How to Choose Government ID Verification

  1. Open Keytos Connect, enter your work or school email under Enter your email to begin, and click Begin.

  2. Under Select your authentication method, click Legal document.

    Keytos Connect Select your authentication method screen with the Legal document option highlighted to verify with a government ID

How to Verify Your Identity with Your Phone

  1. Keytos Connect shows a QR code. Scan it with your phone’s camera to open the identity verification page on your phone. To verify on this computer instead, click Open in browser instead.

    Keytos Connect Verify your identity dialog with the QR code highlighted, waiting for verification to complete

  2. On your phone, follow the prompts on the Veriff identity verification page. When asked to Take a photo of your document’s photo page, place your ID on a flat surface and take a photo. Accepted documents are an ID card, passport, residence permit, or driver’s license.

    Veriff Take a photo of your document's photo page screen on a phone, with the ID blurred and the list of accepted documents

  3. If you’re using a driver’s license, you’re asked to scan the barcode located on the back of your driver’s license. Turn your license over and hold the barcode in the frame until you see a green check mark.

    Veriff Please scan your barcode now screen on a phone, with the back of a driver's license blurred and a green check mark

  4. When asked to Take a selfie, hold your phone at eye level, center your face in the oval, and tap the shutter button. Veriff compares your selfie with the photo on your ID.

    Veriff Take a selfie screen on a phone with an oval face guide and the shutter button, with the face blurred

  5. Complete any other prompts. When you see Thank you!, your verification data has been submitted. Tap Continue.

    Veriff Thank you screen on a phone confirming the verification data was submitted, with the Continue button

How to Start Setting Up Your Security Key

  1. Back in Keytos Connect, under What do you want to do next?, click Set up your security key. If your IT team already put your credentials on the key, click Unblock a pre-loaded key instead, and set your own PIN.

    Keytos Connect What do you want to do next dialog with Set up your security key highlighted above Unblock a pre-loaded key

How to Connect Your Security Key

  1. If you see Insert a security key, plug your security key into your computer, and click Refresh.

    Keytos Connect Insert a security key screen asking you to plug in your key, with the Refresh button highlighted

  2. Under Security key detected, check that the Vendor, Model, and Serial number match the key you plugged in, and click Continue.

    Keytos Connect Security key detected screen showing the YubiKey vendor, model, and serial number, with the Continue button highlighted

How to Put Your Credentials on Your Security Key

  1. If your key already has a PIN, you see Enter the PIN set on this key. Enter the key’s current PIN. If you don’t know it, click Forgot PIN? Reset the key.

  2. Check the box to confirm that all existing certificates on the key will be cleared. Existing FIDO2 passkeys on the key aren’t affected. Click Continue.

    Keytos Connect Enter the PIN set on this key screen with the PIN entered, the confirm certificates will be cleared checkbox checked, and Continue highlighted

  3. Keytos Connect shows Installing the credential. Keep your security key plugged in, and touch it each time it blinks. Setup has two steps, and the last one installs your passkey.

    Keytos Connect Installing the credential screen asking you to touch your security key when it blinks while it installs a passkey

  4. When you see Security key successfully set up, click Sign in.

    Keytos Connect Security key successfully set up dialog with the Sign in button highlighted to sign in with your new security key

How to Sign In with Your New Security Key

  1. In the Microsoft sign-in window, under Face, fingerprint, PIN or security key, Windows asks you to Choose a passkey. Click Security key.

    Microsoft sign-in with the Windows Security Choose a passkey dialog and the Security key option highlighted

  2. Enter your security key’s PIN, and touch the key when it blinks.

  3. Keytos Connect shows Security key onboarding completed.

    Keytos Connect Security key onboarding completed notification after signing in with the new security key

  4. On the Identity management page, your security key shows as Connected, with its Model and Serial number. To see what’s on it, click About this key.

    Keytos Connect Identity management page showing the onboarded YubiKey 5 USB C NFC with the Connected badge highlighted

Done! You can now use your security key to sign in to your work or school account.