DUO 雙重驗證 (2FA)

A recommended and mandatory solution for <2FA Policy> and <Handling Personal Data Policy>. 

Available to

Staff, students and department

Service Charge and Application

Free; Self-Service Enrollment is required

Service Availability

24 x 7; except maintenance period

Support

Please submit to ITSC Service DeskInformation Security > General Enquiry > 2FA

 

Read the KB article here first for a quick understanding for the 1st time enrollment process.   

2 easy steps to activate DUO:

a) Download the ‘Duo Mobile’ app from App Store and install it in your designated mobile device 

b) Enroll your account via Two-Factor Authentication (2FA) Self-Service User Portal. 

As an alternative to using tablet/mobile device, departments or individual users (students or staff) can purchase hardware tokens for Duo 2FA.  

Price of each hardware token for Duo 2FA: HK$100 

How to place an order: 

For Department order: 

  1. Fill in the Hardware Token for Duo 2FA – Order Form (for department). 
  1. Return the signed order form to ITSC at the email address stated in the form. 
  1. ITSC will notify you via the email provided in the form to collect the hardware token.  The maximum lead time is 5 working days. 
  1. Payment method: by inter-departmental transfer. 

For Individual order: 

  1. Fill in the Two-Factor Authentication (2FA) – Hardware Token Order Form (Individual Order) 
  1. ITSC will notify you via the email provided in the form to collect the hardware token.  The maximum lead time is 5 working days. 
  2. Payment method: Cash / EPS / AliPay HK / WeChat Pay (HK) / VISA / Master / UnionPay / Octopus 

Please check out the KB article for a list of DUO 2FA quick user guides, video and FAQs.  

Platform Prerequisites / Supported Clients
A) Windows clients login

(Deployment Guide / Desktop Logon Guide)

  • NET Framework 4.5 or later
  • Win 10, 11
B) Windows servers
(Deployment Guide)
  • NET Framework 4.5 or later
  • Win Server 2016, 2019, 2022
  • Require up-to-date security patch of Duo Mobile App
  • Require mobile device with screen lock
C) Unix/Linux servers
(Deployment Guide)
  • CentOS 5 or above
  • Ubuntu 12.04 or above
  • Linux 5 or above
User Guide Prerequisites / Supported Clients
DUO 2FA User Guide
(KB article)
  • iOS 16 or above
  • Android 11 or above
Self-Generate & Use of Bypass Code User Guide
(KB article)
Have your CU Link Card or Rescue Code ready
DUO 2FA User Guide for VPN Connection
(PDF version)
DUO 2FA User Guide for CUHK Central Authentication
(PDF version)
DUO 2FA User Guide for O365 Applications Login
(PDF version)
Clients which support modern authentication including:

  • Windows OS: Office 2016 or above, Office 2013 with modern authentication registry key updated
  • Mac OS: native mail app in MacOS 10.14 or above, Outlook 2016 (or above) for Mac
  • iOS: iOS 15 or above + native mail client (bundled in iOS),
    iOS 15 or above + Outlook app (to be downloaded from App Store)
  • Android OS: Android 11 or above + Outlook app for Android