DuoConnect lets you easily access your organization’s SSH servers without needing to use a VPN.
To modify the Duo Authentication for macOS fail mode after installation, open Terminal and run one of the following commands as an administrator. Specify true to allow user logon without completing two-factor authentication if the Duo Security cloud service is unreachable or false to prevent user logon when Duo is unreachable. To set true: sudo plutil -replace failopen -bool true /private/var/root/Library/Preferences/com.duosecurity.maclogon.plist. Get the latest Duo Authentication for macOS release notes. Get the latest Duo Authentication for macOS release notes. Skip navigation. Duo Security is now a part of Cisco. Contact Sales Free Trial. Multi-Factor Authentication (MFA) Verify the identities of all users. Duo Authentication for Epic Group Policy Templates and Documentation: Current Release. Duo macOS Login. Read the Duo Authentication for macOS release notes or install instructions. The Duo macOS Logon zip files can be verified against the following SHA-256 checksums: Current Release. Jan 02, 2019 Duo Security (provides a two-factor authentication integration for macOS that is easy to deploy, use, and manage. This demonstration vid.
Duo Authentication For Macos Windows 7
DuoConnect is supported on 64-bit versions of Windows, macOS, and Linux systems. To use DuoConnect, you'll need to install the DuoConnect client software on your workstation, then perform some configuration steps for SSH to work. Your Duo administrator will send you the detailed connection information you’ll need to update your SSH connections.
Contents
Windows Clients
Install DuoConnect
- Download the latest DuoConnect Installer for Windows on your computer while logged in as an administrator.
- Double-click the downloaded MSI file to launch the installer.
- On the 'DuoConnect Setup Wizard' page, click Next.
- On the 'Destination Folder' page leave the default destination selected and click Next.
- Click Install on the 'Ready to install DuoConnect' page. If a pop-up appears asking 'Do you want to allow the following program to install software on this computer?', click Yes.
- Click Finish on the 'Completed the DuoConnect Setup Wizard' page to exit the installer.
Configure
Now that you’ve installed DuoConnect, you need to update your SSH client configuration to use it.
PuTTY
- Open up PuTTY and load a saved PuTTY session for the SSH server you'll be connecting to with DuoConnect.
- Expand the Connection category on the left-hand side of the PuTTY session window, and then click on Proxy. The 'Options controlling proxy usage' appear on the right-hand side of the window.
- Under 'Proxy type' select Local.
- Under 'Telnet command, or local proxy command' copy and paste in the DuoConnect connection string you received from your Duo administrator. Here's an example of what the command might look like:
- Return to the saved PuTTY session window and click Save to update the session with the DuoConnect information.
- Repeat the saved session configuration steps for all SSH servers you will access using DuoConnect.
Git, Cygwin, and Other OpenSSH based Terminals
- Open your ~/.ssh/config file in a text editor. If you don't have this file, create it.
- Copy and paste in the DuoConnect connection strings you received from your Duo administrator into the end of your config file. Here's an example of what the command might look like:
- Repeat these steps for all SSH servers provided to you by your Duo administrator.
- Save the ~/.ssh/config file.
macOS Clients
Install DuoConnect
- Download the latest DuoConnect Installer for macOS on your computer while logged in as an administrator.
- Double-click the pkg file to launch the installer.
- On the 'Welcome to the DuoConnect Installer' page, click Continue.
- On the 'Select a Destination' page leave the default destination selected and click Continue.
- Click Install on the 'Select Install on HD' page.
- When the installer prompts you to enter your username and password, enter the required information and click Install Software.
- Click Close on the 'The installation was completed successfully' page. When asked if you'd like to move the installer to trash, click Move to Trash to delete the installer package from your system.
Configure SSH
Now that you’ve installed DuoConnect, you need to update your SSH client configuration to use it.
Terminal
- Open your ~/.ssh/config file in a text editor. If you don't have this file, create it.
- Copy and paste in the DuoConnect connection strings you received from your Duo administrator into the end of your config file. Here's an example of what the command might look like:
- Repeat these steps for all SSH servers provided to you by your Duo administrator.
- Save the ~/.ssh/config file.
Linux Clients
Install DuoConnect
- Download the latest DuoConnect Installer for Linux on your computer while logged in as a user with sudo permission.
- Open up a terminal window and navigate to the directory where you downloaded the DuoConnect installer gz file.
- In your terminal window type the following command to unpack the installer:Note that the filename may differ slightly from this example to reflect the most recent version.
- You can now run the installer by typing:
- You'll be asked to enter your password. Upon successful installation you'll see the following:
Configure SSH
Now that you’ve installed DuoConnect, you need to update your SSH client configuration to use it.
Terminal
- Open your ~/.ssh/config file in a text editor. If you don't have this file, create it.
- Copy and paste in the DuoConnect connection strings you received from your Duo administrator into the end of your config file. Here's an example of what the command might look like:
- Repeat these steps for all SSH servers provided to you by your Duo administrator.
- Save the ~/.ssh/config file.
Test SSH Login
Once you've installed DuoConnect and updated your SSH client configuration(s), test an SSH connection to make sure everything is working properly.
- Start an SSH connection as you normally would to connect to your SSH server.
- A browser window will pop-up, prompting you to enter your organizational username and password.
- After primary login you'll need to complete Duo two-factor authentication (or enroll yourself in Duo).
- The next page instructs you to close the browser tab and return to your SSH client.
- You’ll be connected to the SSH server and can then continue with logging in to the remote server like you normally would.
Congratulations! You have successfully accessed your SSH server using DuoConnect!
Updating DuoConnect
We'll periodically release new versions of DuoConnect with new features or functionality, bug fixes, or security patches.
DuoConnect updates are either optional or required. You'll be able to skip an optional update and continue connecting to the remote SSH host, but required updates must be installed before you can access any system.
Optional DuoConnect Updates
If you are not running the latest DuoConnect when attempting to authenticate to an SSH server we'll let you know that your DuoConnect client is out of date.
If you click Update Later/seagate-ntfs-driver-for-mac-el-capitan.html. , you will complete authentication and successfully log in but will be prompted again to update the next time you need to authenticate to an SSH server.
If you click Update Now, you will be taken to a page to download and install the newest version of DuoConnect for your computer platform.
After you install the updated DuoConnect client you will need to reauthenticate to the server from your terminal.
Required DuoConnect Updates
If you are not running the minimum required version of DuoConnect when attempting to authenticate to an SSH server, we'll let you know that your DuoConnect client is out of date and that you must update to continue connecting.
After you install the updated DuoConnect client you will need to reauthenticate to the server from your terminal.
Frequently Asked Questions
Chrome on macOS opens a blank browser page and doesn't authenticate. What should I do?
There is a macOS issue where Chrome fails to open links correctly with a pending Chrome update. Update and relaunch Chrome to proceed. A fix for this is expected in macOS 10.13.4.
At the beginning of the day, when using VS Code or similar tools, you may see a browser pop-up prompting you for first factor without you initiating a connection.
Your editor is attempting a git fetch every time you go to it. You can disable the auto-fetch feature by changing the following setting: 'git.autofetch': false.
You can find more information here: Using Version Control in VS Code.
Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
How It Works
- Enter username and password as usual
- Use your phone to verify your identity
- Securely logged in
Once you've enrolled in Duo you're ready to go: You'll login as usual with your username and password, and then use your device to verify that it's you. Your administrator can set up the system to do this via SMS, voice call, one-time passcode, the Duo Mobile smartphone app, and so on.
Duo Authentication Mac Os
No mobile phone? You can also use a landline or tablet, or ask your administrator for a hardware token. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc.
Why Do I Need This?
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.
Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.
This second factor of authentication is separate and independent from your username and password — Duo never sees your password.
Supported Devices
Click your device platform to learn more:
How Do I Set It Up?
Duo's self-enrollment process makes it easy to register your device and install the mobile app (if necessary). Learn more about enrollment »