How to use Windows logon

This section explains how to use the Windows logon for general users.

Index

  1. Register from the invitation email
  2. Software install
  3. Windows logon setup
  4. How to use Windows logon
  5. If you can’t log on to your PC
  6. Temporarily log on with a password only


1. Register from the invitation email


1-1. Open the email

Please confirm the email with “[YubiOn Portal]Invite to YubiOn Portal” displayed in the title.
If you don’t see the email, please make sure it’s not categorized as spam. Also, make sure that the administrator is doing the email notification.

1-2. Click on the “Registration URL” listed in the body of the email

1-3. Change your password

Input “New Password” in the New Password input field.
Input “Same password again” in the password input field for confirmation.

Click the “Register” button.

Click “OK” on the confirmation message.

1-4. Register the YubiKey

Click on the OTP (One Time Password) input field.

Plug YubiKey into the USB port of your PC.
Make sure that the metal part in the center lights up. Tap on the metal part of the YubiKey.

Click “OK” on the confirmation message.

1-5. Download the installer

Click the “Download” button to download the installer for the client tool.

If you want to download an installer for a different platform than the one shown, click on “Download tools for a different architecture” and select the installer you want to download.

Click “OK” on the confirmation message.


2. Software install


2-1. Run the downloaded installer

If a warning is displayed during the installation.
In environments where Microsoft’s “SmartScreen” feature is enabled, a warning may appear when downloading files or starting installation. If a warning is displayed, follow the steps below to proceed with the installation.
Do not run files that you are not sure you have downloaded from this YubiOn Portal site, as they may be illegal. 1. Click “More info”. 2. Click the displayed “Run anyway” button.

2-2. After reading the software license agreement, check the “Agree” checkbox

2-3. Click “Install”

When the installation is complete, the completion screen will be displayed.

When you exit with the “Launch configuration tool” checked, the configuration tool will automatically start.

2-4. At the User Account Control confirmation pop-up, click “Yes”

2-5. Continue to install the required runtime

At the User Account Control confirmation pop-up, click “Yes”.

The installation of the required runtime will be started.

After the runtime is installed, a pop-up will appear prompting you to reboot.

If you don’t need to reboot, no pop-up will appear.
If you don’t see a pop-up, the installation is complete at this point.

2-6. When a confirmation message appears, click “Yes”

The PC will be rebooted and the client tool installation will be completed.

3. Windows logon setup

Set up the PC while it is connected to the network.

3-1. Start from the start menu

Skip this step if you already have the client tool running.

3-2. In the “Email Address” and “Password” fields, input the “Email Address” and “Password” that you have registered with YubiOn Portal

3-3. Plug the YubiKey registered in YubiOn Portal into the USB port

3-4. Select the “OTP” field and tap on YubiKey to input your one-time password

3-5. Click the “OK” button on the Setup Complete pop-up

3-6. Click “Eixt” to close the configuration tool

4. How to use Windows logon

Explains how to use two-factor authentication using YubiKey.

4-1. Boot the PC.

Boot the PC and display the logon screen.
Make sure that “YubiOn®Wls CredentialProvider” is displayed.

If you don’t see “YubiOn®Wls CredentialProvider”, click on the “sign-in options” and then click on the “YubiOn” icon.

4-2. Plug in the YubiKey

Plug the YubiKey into the USB port.
Make sure that the metal part in the center lights up.

4-3. Input password

Input your Windows password in the input field.

4-4. Input YubiKey

After inputting the password, tap on the metal part of the YubiKey.

4-5. Authentication

After inputting YubiKey, if “Windows password” and “One-time password of YubiKey” are correct, the logon will be successful.

About offline authentication
・To enable offline authentication, the PC must be successfully authenticated online once.
・Each time the PC is successfully logged in, the offline authentication period is updated.
 e.g. If the offline expiration date is set to 3 days.
   If the PC is successfully logged on on 41, offline authentication will be enabled from 41 to 43.
   If the PC is successfully logged on during the above period, it is effective for an additional 3 days from the date of successful authentication.
・Please contact your administrator for the offline expiration date.

5. If you can’t log on to your PC

When you cannot log on to a Windows PC, this state is called “PC lock”. The PC will be locked when “Failed to login a certain number of times” or “Locked by an administrator”. If the PC is locked, the password field is hidden and the message “Machine is locked” is displayed.

About the function of unlocking the PC after a certain time
If the administrator has set “unlock after a certain period of time”, the PC will be unlocked automatically after a certain period of time.
The PC is unlocked when the PC connected to the network starts up.

If the PC is not unlocked after a certain period of time, or if you want to unlock the PC immediately, please contact your administrator.

6. Temporarily log on with a password only

When you can temporarily log on to a PC with only a password, this is called an “emergency logon” state. This mode can only be set by the administrator.

When an emergency logon occurs, the message “Emergency Logon Mode” will be displayed on the logon screen. You can log on by entering only your password in the input field.