<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D54z00009fp3VOCAYOkta Classic EngineMulti-Factor AuthenticationAnswered2025-08-20T09:00:12.000Z2023-09-18T08:47:44.000Z2023-10-02T09:52:45.000Z

h73yz (h73yz) asked a question.

September 18, 2023 at 8:47 AM
Using Okta and yubikey for offline windows computer

I had an idea to use Okta (that we use normally in our organization) and a Yubikey.

to secure an Administrator user on an offline computer that will be used to create a Windows image and install it on multiple other computers.

 

I want to use Yubikey and Okta to verify the login to the admin user.

the technician will have an Okta user that he will need to connect to maybe using NFC (I don't know) to verify his identity and unlock the user.

 

I know it might be a long shot but I would love to know if that is a possibility.

 

*And no it's not possible to provide an internet connection to the computer.

 

 

  • 5 answers
  • 813 views

  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @h73yz (h73yz)​ 

     

    Thank you for posting on our Community page!

     

    Yes, it is doable. Here’s an article on how to do it: https://help.okta.com/eu/en-us/content/topics/end-user/device-access/desktop-mfa-windows-enrollment.htm

     

    Thank you for reaching out to our Community and have a great day!

    _____________________________________________________________________________

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

    Headed to Oktane? Here's what you can expect, plus all the Okta tips you may have missed this month

    _____________________________________________________________________________

    Expand Post
    Selected as Best

  • h73yz (h73yz)

    Hey Thank you for the answer.

    i checked it out looks promising but i cannot find the Desktop MFA.

    can you extend on that?.

     

    also it seems on the multifactor i got a greyed out option on the yubikey.

    i need to create a seed file and documentation on that?.

    i currently have 2 keys.

     

    Expand Post

  • h73yz (h73yz)

    i fixed the yubikey greyed i uploaded the seed file.

     

    but i need a bit more information on the DesktopMFA

     

    we have Okta On-Prem MFA can that also work?

  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @h73yz (h73yz)​ 

     

    Thank you for posting on our Community page!

     

    On-Prem MFA is a different situation which will not work in your use case. 

     

    More info on this here: https://help.okta.com/en-us/content/topics/security/mfa_onprem.htm

     

    Thank you for reaching out to our Community and have a great day!

    _____________________________________________________________________________

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

    Headed to Oktane? Here's what you can expect, plus all the Okta tips you may have missed this month

    _____________________________________________________________________________

    Expand Post

  • h73yz (h73yz)

    well, we might be missing something with our okta.

    Configure Desktop MFA for Windows | Okta

    Following this guide it seems we need to check this: Embedded widget sign-in support and ensure that the Interaction Code checkbox is selected.

    but there is no such option

     

    and also when we try to do the app integration of desktop MFA from the app catalog we get the error

    1. If you get an error message saying This feature isn’t enabled, contact your account representative.

     

    we talked to our representative they got us something that should be enabled for 14 days, but for now, it's still not working, and no options. also, I have a meeting with some Okta engineers from the company and hopefully, he will have more answers.

     

     

    Expand Post
This question is closed.
Loading
Using Okta and yubikey for offline windows computer