Duo MFA Requires Updated Devices

As part of our CSA (Cybersecurity Alignment) initiative, the Division of IT is implementing new enforcement measures to ensure all systems remain secure. Maintaining current versions of your devices and browsers is essential for continued access to Duo Multi-Factor Authentication (MFA). This guide will help you prepare for these changes and walk you through updating your systems if needed.

Note: Your CSU-issued device may be managed and upgraded through your department's or college's information technology office (departmental IT). This guide is applicable to your personal device(s).

If you are a student and Duo MFA Block messages are preventing you from completing an assignment, please visit your department's or college's information technology (departmental IT) office to learn about computer labs or computer check-out availability.

Applicable to:

All CSU System Users (CSU Fort Collins, Pueblo, Spur) subject to the CSU System Acceptable Use Policy.
All users of Duo Multi-Factor (MFA) authentication in CSU System

Prerequisites

Enforcement for applicable devices and browsers is rolled out in two stages:
- Warnings:
  - Affects: end-of-life and behind-on-updates
  - Enforcement starts: Wednesday October 1, 2025
- Blocking:
  - Affects: end-of-life
  - Enforcement starts: Monday January 12, 2026

Warning and Block messages

Warnings

A Warning indicates that your browser or device is not running the most current version. You’ll still be able to log in by bypassing the notification, but the warning will persist every time you authenticate with Duo on that device until it’s updated. You will only receive warnings for up to 14 days before you are required to update (with a Blocking message). These alerts serve as a proactive reminder to keep your system secure and compatible.

Example of Warning message on Android device including option to Skip for now

Example of Warning message on Android device including option to Skip for now

Blocking

A Block means the browser or device you’re using has reached end-of-life and can no longer be used for Duo MFA authentication. You will be unable to log in until the issue is resolved. This enforcement is in place to protect our systems—out-of-date technology poses significant security risks and must be updated before access is granted. This can be further referenced in the CSU System Acceptable Use Policy - Policy Provisions list item 'e' referring to commitment to maintain up-to-date operating systems and software via current versioning and software patches.

Example of Blocking message preventing user from proceeding without resolving Block.

Example of Blocking message preventing user from proceeding without resolving Block.

Instructions

Update Browser

To resolve warning and block messages regarding an out-of-date browser, please see Update Browser.

Example of Block messaging on Chrome. Please use our provided resources and see Update Browser.

Update OS (Operating System)

To check your device's current version and perform any version updates, please see Update Device OS (Operating System).

Example of Block messaging on Windows. Please use our provided resources and see Update Device OS.

Replace Device

If your device cannot be updated to a current, supported version and needs to be replaced, please see Replace Personal Computer or Mobile Device.