@@ -59,7 +59,7 @@ New users can apply for a trial account with limited core/GPU hours without a pr
For security reasons, you can't login with a combination of username and password. Instead, we use a system called **Multi-Factor Authentication** (MFA, sometimes 2FA for two-factor authentication), i.e. you need to prove your identity with two different (as in different systems/locations) factors:
- The first factor is given by the SSH public key. Information on how to generate the key and send it to us is provided below. In addition, you can find general information on public key authentication [here](https://www.ssh.com/academy/ssh/public-key-authentication).
- The second factor involves the [Cisco Duo app](https://duo.com/product/multi-factor-authentication-mfa/duo-mobile-app). To use it, you will need to register your account, see [cisco-duo-setup.pdf](uploads/cd518a29f4362a9383c7345a975ed065/cisco-duo-setup.pdf) .
- The second factor involves the [Cisco Duo app](https://duo.com/product/multi-factor-authentication-mfa/duo-mobile-app). To use it, you must be an UoC employee, student, or guest with an active [uniKIM](https://kim.uni-koeln.de/unikim_en.html) account, and register your account on the UoC campus, see [cisco-duo-setup.pdf](uploads/cd518a29f4362a9383c7345a975ed065/cisco-duo-setup.pdf) .
If you own a [YubiKey](https://en.wikipedia.org/wiki/YubiKey) hardware token, you can use it in one-time password [(OTP)](https://en.wikipedia.org/wiki/One-time_password) mode as a second authentication factor instead of Cisco Duo. If you are interested in this solution, please contact the [HPC-Team](mailto:hpc-mgr@uni-koeln.de). Please note: While we cannot provide YubiKeys to users, their purchase could be a worthwhile investment for about 50€.
