---
title: Setup Yubi / Security key FIDO2
description: "## Confirm if you are restricting FIDO2 keys to specific enrollments. If 'Enforce Key Restrictions' is YES you will need to add the Yubikey AAGUIDs Navigate to Authentication Methods > Policies > FIDO2 > Configure ![](https://forsynse.com/wp-content/uploads/2025/08/image-12.png) You can verify your…"
url: "https://forsynse.com/kb/setup-yubi-security-key-fido2/"
updated: "2025-08-18"
category: Microsoft365
---

# Setup Yubi / Security key FIDO2

## Confirm if you are restricting FIDO2 keys to specific enrollments. If 'Enforce Key Restrictions' is YES you will need to add the Yubikey AAGUIDs

Navigate to Authentication Methods > Policies > FIDO2 > Configure

![](https://forsynse.com/wp-content/uploads/2025/08/image-12.png)

You can verify your keys information by navigating here: [https://www.yubico.com/genuine/](https://www.yubico.com/genuine/) and looking up the GUID via their support table: [https://support.yubico.com/hc/en-us/articles/360016648959-YubiKey-hardware-FIDO2-AAGUIDs](https://support.yubico.com/hc/en-us/articles/360016648959-YubiKey-hardware-FIDO2-AAGUIDs)

Go to [https://aka.ms/mfasetup](https://aka.ms/mfasetup) > Add sign-in method

![](https://forsynse.com/wp-content/uploads/2025/08/image.png)

Add security key

![](https://forsynse.com/wp-content/uploads/2025/08/image-1.png)

Select USB Device

![](https://forsynse.com/wp-content/uploads/2025/08/image-3.png)

Follow the enrollment wizard

![](https://forsynse.com/wp-content/uploads/2025/08/image-4.png)

![](https://forsynse.com/wp-content/uploads/2025/08/image-5.png)

![](https://forsynse.com/wp-content/uploads/2025/08/image-6.png)

![](https://forsynse.com/wp-content/uploads/2025/08/image-7.png)

Add your security pin

![](https://forsynse.com/wp-content/uploads/2025/08/image-8.png)

Press the key

![](https://forsynse.com/wp-content/uploads/2025/08/image-10.png)

Name the key

![](https://forsynse.com/wp-content/uploads/2025/08/image-11.png)