Tags

CLASSE Duo: Two-Factor Authentication

In light of the increased threat posed by ransomware and account compromises, CLASSE is adopting the use of Duo two-factor authentication for enhanced security of web services and remote logins. CLASSE Duo uses the exact same app as Cornell's Duo service (no new installation needed), although a separate CLASSE registration is required.

To enroll and manage your two-factor devices, please log into the CLASSE Duo Device Manager with your CLASSE account:

Manage your CLASSE Duo devices

DuoDeviceEnrollment.png

Alternative Enrollment Methods

Enroll via Service Request

CLASSE IT can manually enroll one device in Duo for you if both the above options fail. Submit a ServiceRequest for assistance enrolling in CLASSE duo, including the phone number of the device you would like associated with your CLASSE account.

Enroll via SSH

CLASSE also supports using SSH to enroll your account with Duo.

Windows 10
  1. Open a terminal application, such as Putty or RunXMing, to open an SSH connection to the CLASSE Duo service.
    • RunXMing is available on the desktop of all CLASSE managed computers.
  2. In the opened Window, enter duo.classe.cornell.edu into the "Host Name (or IP address)" field.
  3. Set the protocol to SSH
  4. Click Open on the bottom of the window.
  5. Click "Yes" to accept the RSA Key to continue logging in.
    • Note that after logging in, you will actually be logged on to lnx6137.classe.cornell.edu.
  6. If prompted, enter your CLASSE ID and press enter.
  7. Enter your CLASSE password and press enter.
    • The CLASSE Duo Service will see that your account is not enrolled and will provide a URL for enrollment.
  8. Copy the URL that is returned on the line "Please enroll at" and paste it into the address field in a web browser. This step is time sensitive. Do not save the URL for later use.
  9. Follow the instructions on the webpage to complete your enrollment.
  10. If you are prompted again for your password, you may enter it again (which will close your ssh session), or simply Ctrl-C to exit.

Mac OS/Linux
  1. Open a terminal application and SSH into duo.classe.cornell.edu *using your CLASSE ID*
    (e.g., ssh YourCLASSEID@duo.classe.cornell.edu)
  2. Type "yes" to accept the RSA Key to continue logging in.
    • Note that after logging in, you will actually be logged on to lnx6137.classe.cornell.edu.
  3. If prompted, enter your CLASSE ID and press enter.
  4. Enter your CLASSE password and press enter.
    • The CLASSE Duo Service will see that your account is not enrolled and will provide a URL for enrollment.
  5. Copy the URL that is returned on the line "Please enroll at" and paste it into the address field in a web browser. This step is time sensitive. Do not save the URL for later use.
  6. Follow the instructions on the webpage to complete your enrollment.
  7. If you are prompted again for your password, you may enter it again (which will close your ssh session), or simply Ctrl-C to exit.
Topic revision: r9 - 28 Sep 2021, WernerSun
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding CLASSE Wiki? Send feedback