CU Boulder departments purchasing YubiKeys for multi-factor authentication (MFA) should confirm that the device is compatible with CU Boulder OIT requirements before making a purchase.

CU Boulder OIT maintains a list of compliant and recommended YubiKey models based on device connection type. YubiKeys may be purchased through Marketplace Punchouts, CDW-G, Amazon, or the CU Bookstore, using the appropriate University purchasing method.

An ICT review is not required for the purchase of YubiKeys identified as recommended and compatible by CU Boulder OIT.

Before purchasing, CU Boulder departments should review the CU Boulder OIT MFA FAQ [3] for the current list of recommended and compatible YubiKey models.