@@ -58,12 +58,11 @@ New users can apply for a trial account with limited core/GPU hours without a pr
For security reasons, you can't login with a combination of username and password. Instead, we use a system called **Multi-Factor Authentication** (MFA, sometimes 2FA for two-factor authentication), i.e. you need to prove your identity with two different (as in different systems/locations) factors:
- The first factor is given by the SSH public key. Information on how to generate the key and send it to us is provided below. You can find general information on public key authentication [here](https://www.ssh.com/academy/ssh/public-key-authentication).
- The first factor is given by the SSH public key. Information on how to generate the key and send it to us is provided below. In addition, you can find general information on public key authentication [here](https://www.ssh.com/academy/ssh/public-key-authentication).
- The second factor involves the [Cisco Duo app](https://duo.com/product/multi-factor-authentication-mfa/duo-mobile-app). To use it, you will need to register your account, see [cisco-duo-setup.pdf](uploads/cd518a29f4362a9383c7345a975ed065/cisco-duo-setup.pdf) .
If you own a [YubiKey](https://en.wikipedia.org/wiki/YubiKey) hardware token, you can use it in one-time password [(OTP)](https://en.wikipedia.org/wiki/One-time_password) mode as a second authentication factor instead of Cisco Duo. If you are interested in this solution, please contact the [HPC-Team](mailto:hpc-mgr@uni-koeln.de). While we cannot provide YubiKeys to users, their purchase could be a worthwhile investment for about 50€.
If you own a [YubiKey](https://en.wikipedia.org/wiki/YubiKey) hardware token, you can use it in one-time password [(OTP)](https://en.wikipedia.org/wiki/One-time_password) mode as a second authentication factor instead of Cisco Duo. If you are interested in this solution, please contact the [HPC-Team](mailto:hpc-mgr@uni-koeln.de). Please note: While we cannot provide YubiKeys to users, their purchase could be a worthwhile investment for about 50€.
After you have successfully enrolled in Cisco Duo and prepared your SSH key pair, please send your _public_ key to us.
