Enrollment – YubiEnroll
Easily enroll YubiKeys on behalf of users to make passwordless adoption fast, simple, and scalable.
Improve adoption by enrolling YubiKeys for users
Modern hardware security keys like YubiKeys are proven to stop phishing attacks and account takeovers. But security only works if adoption is simple. Enrollment services allow organizations to enroll YubiKeys on behalf of users, removing setup friction and improving rollout consistency. Organizations can choose the approach that fits their environment, whether that’s a fully managed service like FIDO Pre-Reg or an IT-led tool like YubiEnroll, while maintaining a clean audit trail and strong security posture.
YubiEnroll
YubiEnroll enables IT teams or trusted partners to enroll YubiKeys on behalf of users, making passwordless access quick and manageable.
Organizations can leverage existing identity verification processes, such as in-person proofing, and enroll YubiKeys on short notice using a local client application. This approach is especially useful in environments or regions where turnkey delivery services are not available.
YubiEnroll capabilities that drive security and efficiency
Managing FIDO credential enrollment is simpler with YubiEnroll. Designed for IT administrators, the tool streamlines preparing, creating, and registering FIDO credentials. Whether onboarding a new employee, replacing a lost key, or issuing a new YubiKey on short notice, YubiEnroll supports fast, controlled enrollment without user guesswork.
Support for key platforms
YubiEnroll supports Microsoft Entra ID and Okta environments and is delivered as a command-line tool for Windows. IT staff with appropriate Identity Provider permissions can enroll FIDO credentials on behalf of users and configure YubiKeys securely. Support for additional identity providers is planned.
Support for a range of YubiKeys
YubiEnroll supports all YubiKey and Security Key form factors, whether you’re connecting via NFC or USB. Simply plug in or tap and let YubiEnroll guide you through enrollment.
Support range of configuration options for IT teams
YubiEnroll supports advanced key configuration, including factory resets, PIN setup and enforcement, and user verification settings. It also enables Enrollment on Behalf Of (EOBO) for Microsoft Entra ID and Okta.
Getting started has never been easier
Ready to start YubiKey as a Service?
If you’re looking for an easy, flexible solution to improve your organization’s security landscape, let YubiKey as a Service own the logistical difficulties. Our team is here to support you on your journey. If you are looking to purchase perpetual, connect with us.
Looking for technical assistance?
Need help with technical integration services, deployment planning, YubiKey management, user training, or anything else? Yubico Professional Services offer best-in-class assistance.