I almost made it through my summer nap but some ASU security issues have recently popped up that have impacted several of our members and I think it best to not wait until the September Board meeting to alert you to these changes.

Account Security Changes at ASU Affect Retirees

In the past few weeks, security measures that ASU took to protect itself from hacks, have begun affecting retirees. If you log in to any ASU site, e.g., Outlook, My ASU, you may already have seen warning messages about the need to use a second authentication factor. The following article by Connie McNeill address this issue along with a couple of related security topics.

• Duo Two-factor Authentication - what it is and how to get it
• Duo Two-factor Authentication Backup - why useful and how to get it
• Using your @asu.edu email address for services like Dropbox and Google Drive

DUO Two-Factor Authentication

Two-Factor Authentication means that when you sign in you need two means of identification to complete the process. The first is most often a UserID and password, as it is at ASU.  The second is typically something you have in your possession, but it could also be a biometric check.

ASU has been requiring DUO Two-Factor Authentication for all faculty, staff and students for some time. Over the past few weeks, the requirement has been rolling out to retirees who log in to ASU as well. You can read about DUO and the reasons for requiring it on the ASU website.

If you  haven’t already been forced to use DUO, you eventually will be. It would be wise to sign up now which you can do by logging in to myASU and following the detailed instructions. (If this link doesn't work for you, log in to My ASU, click on the Service tab at the top, then the Service Catalog in the top left box, then in the search box enter "KB0011028", which should provide you with a link to the article.)

Using DUO is not difficult. You can use a smart phone, land line, or a device you plug in to a USB port on your computer (YubiKey). With your smart phone you can choose to receive a push notification (click on it to be authorized), a text message (enter a code to be authorized), or even a phone call giving you the code to enter for authorization. You can even use a land line to receive the call with the needed code. With the YubiKey, you get automatic authorization once it is set up and plugged in to the computer you are using.

Duo Two-factor Authentication Backup

Once you are using DUO to access ASU, I recommend that you also add a second (backup) acceptable device. Why do I need a backup? There are several reasons but one is you will not be able to log into ASU if you phone is lost or in the shop for repairs.

To add a second (backup device)

• Log in to My ASU and click on the "Profile" tab at the top of the page, 
• Click on "Password & Security" on the middle right, then on "Two-Factor Auth Device Management".
• You can then register a backup device to use in the event that your primary device is not available.

Using your @asu.edu Email Address with Services like Dropbox and Google Drive

If you are using Dropbox or some other services, such as Google Drive and are using your @asu.edu email address for the account, you may receive an email from ASU notifying you that you will either need to sign up for the service through ASU or use a different email address for the service (i.e., not you@asu.edu).

To sign up to use Dropbox through ASU, you need to fill out a request form. This allows ASU to connect your @asu.edu email address with your ASURITE UserID, and thus authenticate your login.

To use ASU Google Drive, you simply access it through myASU. If your Google Drive is personal, use a non-ASU email address.

Barry McNeill, editor