Two-Factor Authentication

The CSC currently uses [DUO 2FA https://uwaterloo.ca/2fa] for off-campus SSH access to the general-use machines. This makes it easy to sign up new members remotely, who almost certainly already have the DUO app installed.

For members

If you are on campus, you may SSH into any general-use machine via:

• public key authentication
• password
• GSSAPI (Kerberos ticket)

If you are using a student CS machine as a jump host, or are using the campus VPN, this also counts as being on campus.

If you are off campus, you may SSH into any general-use machine via:

• public key authentication
• password and DUO

Note that you may not SSH remotely into a CSC machine using only your password.