Connect to the Purdue Home Page

Purdue University

Identity and Access Management

SecurePurdue Token - How to Use Your New BoilerKey

Getting Started

Congratulations on moving into a new-era of computer security. Your new BoilerKey provides greatly enhanced security. Please visit Getting started with Duo Mobile.

Using the BoilerKey

Triggering Your BoilerKey to Display a New Code

  • If you have a hard token BoilerKey (a physical device)

    To have your Purdue BoilerKey generate a new code, hold your token with the notched end for the key ring to the right and then press the button directly to the right of the display screen. The BoilerKey will display the new code for 25 seconds. If you need a new code, you can press the button and a new code will be displayed.

    Picture showing how to hold a Purdue BoilerKey Hard Token


  • If you have a soft token BoilerKey (a smartphone application)

    1. Start the Duo Mobile application on your smartphone. Duo Mobile Icon looks like:

      Duo Mobile Icon
    2. Tap on the Key icon next to the account named "Purdue University"

    The soft token BoilerKey does offer an alternative authentication method that does not use a BoilerKey code called Duo Push. Using this method triggers a notification on your smartphone when authentication is attempted that asks you if you approve the authentication. See options 2 and 4 in the "Authentication Using the Purdue BoilerKey" section below to learn how to initiate a Duo Push notification.


Authentication Using the Purdue BoilerKey

In all applications using the BoilerKey for authentication, you will enter a passcode instead of your Purdue Career Account password in the password box. Purdue currently allows four (4) different options for this passcode.

Option 1: Using your Career Account Password plus the BoilerKey Code (Default)

By default, the passcode is your Purdue Career Account password augmented with the BoilerKey Code separated by a comma.

Passcode = [Career Account Password],[BoilerKey Code]

For example, if your career account password was D0wnOnF@rm and your Purdue BoilerKey displayed the code 041281, then the passcode you would enter would be D0wnOnF@rm,041281


Option 2: Using your Career Account Password with a Duo Push (soft token only)

Duo Push allows you to approve login requests via your Duo Mobile app on your smartphone. To trigger this form of authentication, your passcode would be your Purdue Career Account Password augmented by the key word push separated by a comma.

Passcode = [Career Account Password],push

This passcode will trigger a notification sent to your smartphone - just tap on the approve button to authenticate. Note: If you plan to use the Duo Push method, please make sure you have your smartphone available to use when you initiate the request. If a request is not acknowledged quickly, the request could time out and the authentication will fail.


Option 3: Using a PIN plus the BoilerKey Code

If you would rather use an optional 4 digit PIN instead of your Purdue Career Account Password in your BoilerKey Passcode, please follow these steps.
  1. Go to the Purdue BoilerKey Self Serve page.

  2. In the "Set an optional 4 digit PIN number for your BoilerKeys" section, enter the new PIN in the first field, your BoilerKey Passcode ([Career Account Password],[BoilerKey Code]) field and then click Set Pin.
Once you have set your PIN, your passcode will be in the following format:

Passcode = [PIN],[BoilerKey Code]

For example, if you set your PIN to 1987 and your Purdue BoilerKey displayed the code 041281, then the passcode you would enter would be 1987,041281



Option 4: Using a PIN with a Duo Push (soft token only)

As with option 2 above, you will need to follow these steps to use a 4 digit PIN instead of your Purdue Career Account Password as part of your BoilerKey passcode:

Note: if you are already using a PIN as a substitute for your Purdue Career Account Password, you can skip to steps 1 and 2 below.
  1. Go to the Purdue BoilerKey Self Serve page.

  2. In the "Set an optional 4 digit PIN number for your BoilerKeys" section, enter the new PIN in the first field, your BoilerKey Passcode ([Career Account Password],[BoilerKey Code]) field and then click Set Pin.

Duo Push allows you to approve login requests via your Duo Mobile app on your smartphone. To trigger this form of authentication while using a PIN, your passcode would be your PIN augmented by the key word push separated by a comma.

Passcode = [PIN],push

This passcode will trigger a notification sent to your smartphone - just tap on the approve button to authenticate. Note: If you plan to use the Duo Push method, please make sure you have your smartphone available to use when you initiate the request. If a request is not acknowledged quickly, the request could time out and the authentication will fail.

Using the BoilerKey for OnePurdue SAP Portal Authentication

You may use your BoilerKey to access your OnePurdue SAP Portal. You will continue to use your Career Account login and password for other Purdue resources. To use your BoilerKey on the portal:
  • Go to the Purdue BoilerKey Self Serve page. In the "Available BoilerKey Authentication Service" section, turn on the OnePurdue SAP Portal service.
  • Connect to OnePurdue SAP Portal.
  • In the "User ID" box enter your career account login name.
  • In the "Password" box, enter your passcode.
  • Click the "Log on" button. You should now have access to the Portal.
  • If you have difficulty logging in, please refer to the "Problems?" section of this webpage.

Troubleshooting

Problems?

You may encounter the OnePurdue SAP Portal error message: "User Authentication Failed" when attempting to login. If subsequent attempts are also unsuccessful or you have other difficulties with the BoilerKey, go to the SecurePurdue page at www.purdue.edu/securepurdue and follow the BoilerKey links to the Self Serve page. Login to the page using your career account login name and password.
  • In the "Check your passcode", enter your passcode.
  • Click on the "Check Passcode" button.
    • If successful, you will receive a message: "The passcode was correct". Please contact the ITaP Customer Service Center or your Distributed IT Support to further troubleshoot your authentication problem.
    • If unsuccessful, please use "Re-Synchronize " on the self serve page.

      If you are successful in re-synchronizing your BoilerKey, please attempt to use your BoilerKey for authentication once again.
  • Contact your distributed IT group, the ITaP Customer Service Center or itap@purdue.edu if you have further difficulties.

Don't Have Your Key With You?

Please contact your Distributed IT Support or the ITaP Customer Service Center immediately to report a lost or stolen BoilerKey. If you are temporarily without your BoilerKey, they can reset your SAP Portal access to use the career account password. Please notify them again to resume use of the BoilerKey.

About the BoilerKey

Security is the best reason to use the new BoilerKey. Guessing or stealing a password becomes extremely difficult with a password that continues to change.

Your new BoilerKey can generate continually changing series of six digits. These six digits, combined with either your Purdue career account password or PIN (depending on your preference), are used in place of password alone. Logging into secure applications then becomes a matter of entering your user name, then filling in the password with your career account password (or PIN) and the current six digit number (BoilerKey code) displayed on your BoilerKey. Once a BoilerKey code has been used once, it cannot be used again. This one-time password feature provides an extra level of security.

Helpful BoilerKey Links

ITaP Customer Center

ITaP Customer Service Center
On Campus: 4-4000
Off Campus: 765-494-4000
itap@purdue.edu

Hard Token BoilerKey Care

The BoilerKey is the property of Purdue University and is issued to employees in the normal course of their employment. Keys must be promptly surrendered to the University at termination or separation of employment.

The Key must be kept private and secure; do not permit others to use your token or any session established with the Key.

You must not attempt to alter, circumvent or otherwise tamper with the BoilerKey. Do not corrupt, deface or damage the BoilerKey. The BoilerKey has no replaceable parts, including its battery.

You are responsible for the BoilerKey so please keep it attached to a personal item such as a key chain to insure its safety and availability.

The BoilerKey is designed to be rugged and should last for approximately six years. However, treat it with the same care you would any sensitive electronic device such as a cell phone or PDA.

Feedback | Contact Purdue
Maintained by: IAMO Team

Purdue University, West Lafayette, IN 47907, (765) 494-4600
© 2010 - 2013 Purdue University | An equal access/equal opportunity university | Copyright Complaints
If you have trouble accessing this page because of a disability, please contact the CSC at itap@purdue.edu or (765) 494-4000.