Content (44)
Going forward, Zoom meeting owners (hosts) will receive an email notification when Zoom judges their meeting’s security has put it “at risk” for intrusion or disruption ("Zoombombing") by uninvited or unwanted participants.How Does Zoom Decide If a Meeting Is At Risk?When Zoom determines a meeting…
On Wednesday, February 25, 2026, at the direction of IT leadership, Cornell will complete its accelerated enforcement of DMARC ("Domain-based Message Authentication, Reporting, and Conformance") policies. After the implementation, all email messages from “@cornell.edu” addresses that fail…
For over a decade, Tim Bradish has helped shield and strengthen Cornell services and systems against attack. In a spotlight story on the Human Resources (HR) home page, the associate chief information security officer attributed his team’s success to their interest in working with each other and…
Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.November's Agenda includes:News from the Front - BillSecure Connect Update - Dan VillantiOpen ForumThe IT Security SIG…
The monthly IT Security SIG meeting brings together Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics. For October, the IT Security SIG team invites you to join them for a trivia gameshow. Come test your technology, current…
Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.September's Agenda includes:
Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.
July’s Agenda includes:
Starting Sunday, November 26, 2023, Cornell users will see a minor change when they log into Cornell IT services using the CUWebLogin webpage.
By default, the Remember My Username checkbox will be checked and the current browser instance will auto-fill the user’s Cornell NetID in the Username (…
Beginning this summer, CIT will launch an initiative to significantly improve email security at Cornell by implementing Domain-based Message Authentication, Reporting, and Conformance ("DMARC") at Cornell.
Cornell users who send bulk emails (such as, but not limited to, e-newsletters or…
Keeping your personal information, Cornell sign-in credentials, and important data safe means protecting your passwords. Anyone with active online accounts encounters dozens of passwords used to access Cornell resources, personal online banking, e-commerce sites, and other websites. Below you will…
CUVPN does not support the USB key for Duo authentication.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
When you get a new smartphone, there are a few steps you need to take to set up the phone you're using for your Two-Step Login account. The exact steps depend on whether you kept your phone number or if you have a new number on your new smartphone.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
Log Into the Device Management PortalTo add a device, you need to access the management portal.
Use Append Mode Authentication
Some campus IT services, such as Desktop Everywhere using the VMware Horizon View client, do not support a web interface to specify how to complete the second step of authentication.
If you enter just your NetID and password with these non-web apps, Two-Step…
Get a Passcode from a Hardware TokenAcquire and enroll a hardware token that will display a passcode with a simple button push.
During late Fall 2025 and early Spring 2026, Cornell will begin disabling the Duo Phone Call and Duo SMS Passcode methods.
What do I do if my certificate is compromised?
Important: Contact the IT Service Desk to revoke a certificate if:
The server is compromised.
The private key is compromised or lost.
Your passphrase is compromised or lost.
Why Two-Step Login?
NetID passwords belonging to Cornell community members are stolen, guessed, or hacked daily. Two-Step Login means a thief would also need to have your device in order to do anything with your password.
Typically, by the time a password theft is detected or reported,…