YubiKey as a Service – Enrollment
Delivering organizations choice in creating phishing-resistant users and going passwordless. YubiKeys ready to activate like a credit card.
Pre-enroll YubiKeys for your employees
Go beyond phishing-resistant MFA and accelerate the creation of phishing-resistant users. With Enrollment, YubiKeys arrive pre-enrolled and ready to activate, reducing setup friction and enabling secure onboarding from the start. Organizations can choose from three enrollment options based on their deployment needs:
Factory pre-programmed (fully managed):
Receive ready-to-use, factory-programmed YubiKeys shipped directly to users worldwide through Yubico’s FIDO Pre-reg service—eliminating manual enrollment and accelerating deployment.
IT-driven enrollment: Use YubiEnroll, Yubico’s free command-line enrollment tool, to automate the provisioning of YubiKeys at scale. Designed for technical IT teams and deployment partners, it streamlines enrollment and distribution across your organization.
Factory pre-programmed (fully managed)
FIDO Pre-reg is a turnkey service that delivers pre-enrolled YubiKeys directly to employees, enabling passwordless login from day one. Keys are factory-programmed with user credentials and shipped globally, reducing operational overhead for IT teams.
Available through YubiKey as a Service, FIDO Pre-reg offloads delivery logistics end to end, reducing operational burden for both IT teams and users. FIDO Pre-reg is currently generally available with Okta, Versasec, and Ping Identity, and in Early Access with Microsoft with additional Identity Providers planned.
IT-driven enrollment
A free command line tool, YubiEnroll, that allows technical IT teams or partners to enroll YubiKeys for users and distribute them directly. This service is meant purely for technical teams to enroll YubiKeys on short notice or in regions where turnkey delivery services may not be available.
Learn how Okta protected their global workforce with Enrollment
In 2024, Okta implemented FIDO Pre-reg to deploy YubiKeys across its global workforce, strengthening phishing-resistant authentication at scale. Okta selected Yubico for its leadership in hardware security keys and its ability to support a global deployment with the highest assurance levels.
Deployment goals focused on phishing-resistant onboarding, consistent recovery processes, and strong security with minimal administrative overhead. Challenges included global logistics, manual recovery onboarding, limited policy enforcement, and the lack of roaming authenticators.
“At Okta, we’re on a mission to ditch the password. As you’d expect, we use Okta FastPass for passwordless authentication for our global workforce. With Yubico, we saw an opportunity to leap the final hurdle to deliver an end-to-end passwordless experience.”
Download this free infographic to learn more about how Okta became an early adopter of FIDO Pre-reg, deploying YubiKeys to its entire global workforce to establish an end-to-end phishing-resistant authentication experience.
