I got a new phone. How to activate Duo 2FA (2-factor authentication) on it ?


 

Picture 1.png

 

Applies to

Students and Staff

 

Solution

This solution applies to users who have enrolled 2FA and switching the registered mobile device to a new one. If you are going to register for 2FA for the first time (e.g. new students / staff), please refer to this user guide instead.

In general, it involves (1) adding your new device and (2) removing your old, registered device. Please choose the scenario closest to your situation:

It is recommended to carry out these steps on your laptop or desktop computer regardless of the scenario chosen.

 

Scenario 1: My old phone is on hand and Duo Mobile app is still functional

  1. Visit https://duo.itsc.cuhk.edu.hk/ and sign in using any web browser.
  2. Check the box "Okay, I am ready now.", then click GO TO MANAGE DEVICES button.

    Phone_1.png
  3. Click Other options.
    Tips: Ignore the Duo push message (if any) received by your old phone.

    Phone_2.png

  4. Click Manage devices.
     Tips: Ignore the Duo push message (if any) received by your old phone.

    Phone_3.png

  5. Click Duo Push and respond to the 2FA prompt using your OLD phone.

    Phone_4.png

  6. Click on Add a device.

    Phone_5.png

  7. Click Duo Mobile to continue.

    Phone_6.png

  8. Click I have a tablet (even you are using a smartphone) to continue.

    Phone_7.png

  9. Download DUO Mobile App on your NEW phone, then click Next to continue.

    Phone_8.png

  10. On your NEW phone, open Duo Mobile app, tap Add (+) button on the top right-hand corner, then tap Use QR code, and scan the QR code that shown on screen.

    Phone_8_1.png

  11. After scanned the QR code, then click Continue to complete the enrollment.

    Phone_9.png

  12. (Optional) If you are not using the OLD phone, please remove it from the device list. To do so, click Edit button next to the OLD phone, then click Delete to proceed.

    Phone_10.png



 

 

Scenario 2: My old phone is no longer available / I have erased my old device.

  1. Visit https://duo.itsc.cuhk.edu.hk/ and sign in using any web browser.
  2. After signed-in, click BYPASS CODE tab > I HAVE A VALID CU LINK CARD ON HAND. > START

    bypass_1.png

  3. Follow the on-screen instructions to input your CU Link Serial Number. Respond to the CAPTCHA and click GET BYPASS CODE.

    bypass_2.png

  4. Your Bypass Code will be shown on screen after your CU Link Serial Number is validated. Please keep it in a safe place.

    bypass_3.png

  5. Go back to ENROLL DEVICE tab.

    Bypass_1.png

  6. Check the box "Okay, I am ready now.", then click GO TO MANAGE DEVICES button.

    Phone_1.png

  7. Click Other options.
     Tips: Ignore the Duo push message (if any) received by your old phone.

    Phone_2.png

  8. Click Manage devices.

    Phone_3.png

  9. Click Bypass Code (or called 略過代碼 / 旁路代碼) to proceed.

    Bypass_2.png

  10. Enter the Bypass Code you have just obtained and click Verify.

    Bypass_3.png

  11. You should now be redirected to the device page. Click on Add a device.

    Phone_5.png

  12. Select Duo Mobile to continue.

    Phone_6.png

  13. Click I have a tablet (even you are using a smartphone) to continue.

    Phone_7.png

  14. Download DUO Mobile App on your NEW phone, then click Next to continue.

    Phone_8.png

  15. On your NEW phone, open Duo Mobile app, tap Add (+) button on the top right-hand corner, then tap Use QR code, and scan the QR code that shown on screen.

    Phone_8_1.png

  16. After scanned the QR code, then click Continue to complete the enrollment.

    Phone_9.png

  17. Remove your OLD phone from the device list. To do so, click Edit button next to the OLD phone, then click Delete to proceed.
    Tips: New devices are appended to the end of the list. Therefore, your OLD phone normally appears in HIGHER order of the list.

    Phone_10.png

 

 

Don't have CU Link Card or it is Expired?

Please check if you still have the rescue code saved when you first enroll into 2FA. If so, you can use it to generate the Bypass Code by following the steps below:

  1. Visit https://duo.itsc.cuhk.edu.hk/ using any web browser.
  2. After signed-in, click BYPASS CODE tab > I HAVE A RESCUE CODE ON HAND. > START

Otherwise, please contact us for assistance on your 2FA enrollment and attach a copy of your expired student card / identity document showing your full name and photo (please MASK/HIDE other sensitive information) for identity verification.

 

My CU Link card cannot be verified?

In Scenario 2, earlier versions of CU Link cards with only 10 characters of serial number may not be able to pass the bypass code verification. In this case, please visit CU Link Card Centre for card re-issuance and contact us if you need assistance on your 2FA enrollment.

 

#new phone #change phone #swap phone