The Licensed Software Office distributes hardware tokens that have been selected for use with the UTORMFA service. This is an alternative for those who do not have the option to use a mobile device with the Duo Mobile app.
For background and technical information about the service as well as how to self-enroll using a mobile device see https://isea.utoronto.ca/services/utormfa/.
Students
St.George students can pick up at hardware token at the Help Desk at Robarts Library. The first hardware token is free and there is no shipping option. The second hardware token is $25 and can be purchased at software.utoronto.ca. The hardware token will be assigned and enabled at pick up.
Faculty and Staff
| Description | SKU | Price Per Token |
| UTORMFA Hardware Token - Single Token with Pickup from Help Desk at Robarts Library | UTORMFAPU1 | $21 |
| UTORMFA Hardware Token - Single Token | UTORMFA1 | $21 |
| UTORMFA Hardware Token - Multiple Tokens Shipped to a Single Address | UTORMFAMULTI | $21 |
Order a UTORMFA Hardware Token
Faculty and Staff should first consult local IT staff or a Business Officer to determine if a hardware token has already been purchased for use. For individuals located at UTSC contact helpdesk@utsc.utoronto.ca. For individuals located at UTM contact helpdesk.utm@utoronto.ca.
1) How to Purchase
Hardware tokens can be purchased via:
- uSOURCE using U of T Departmental FIS accounts only. If you do not have an account set up please contact usource@utoronto.ca. This option is not available for students.
- software.utoronto.ca using a credit card.
2) Purchase Options
A) Single token purchase with Pickup from Help Desk at Robarts Library
Each purchased token is picked up from the Information Commons Help Desk on the first floor of Robarts Library located at 130 St. George Street, Toronto, Ontario, M5S 1A5. This option is ideal for individuals who are on campus and need access to a single token. Please check the Help Desk website for walk-in desk hours.
B) Single token purchase
Each purchased token is delivered directly to the token recipient. This option is ideal for departments who are unable to distribute or ship tokens directly to token recipients themselves.
C) Multiple token purchase – Shipped to a Single Address
This option is well-suited for units who will distribute tokens to token recipients themselves, either in-person or through mail. A single shipping address must be provided.
3) Shipping / Pickup
After purchase, the LSO will confirm the shipping address and arrange for the vendor to deliver directly to the recipient. Vendor shipping times for single token purchases are 7 to 21 business days with an estimated shipping time of 7 business days. For multiple tokens, with a quantity of five or more purchased and shipped to a single address, the estimated shipping time is 2 to 7 business days. We will only ship tokens to an address in Ontario.
If the purchase is for pickup, the LSO will confirm with with the purchaser who is picking up the token. That person will need to present identification at the time of pickup.
Note: uSOURCE will only accept UofT addresses for shipping. Please input a UofT shipping address. After receiving the order we will email the purchaser asking for the shipping address, even if the desired address was input into uSOURCE.
4) Turn on UTORMFA
Once the token has been delivered or provided to the recipient, they will need to book a video appointment with the Information Commons Help Desk to verify identity and turn on UTORMFA for their account. For those picking up a token from the Help Desk at Robarts Library, it can be assigned at the time of pickup or at a later date using the booking site below.
Booking Site
What You Need
- A workstation with a microphone and camera for identity verification.
- Two pieces of government issued ID.
- The serial number located on the back of the hardware token.
Token information / Battery life
The token does not plug into a USB port and has an internal battery. The expected life of the battery is 5 years. When the battery has been depleted a new token would need to be purchased. It is a HMAC-based one-time password (HOTP) type token.