Set up a Guomi USB key for your account

Prerequisites

• The Guomi USB key feature is available only to whitelisted users. To request access, submit a ticket.

• Before you use a Guomi USB key, ensure that the following requirements are met:

  1. Ensure that you have purchased a Guomi USB security key from an authorized channel.

  2. Ensure that you have attached a Guomi U-Shield certificate in the SSL Certificate console.

  3. The correct driver for the Guomi USB key is installed. You can download the driver from the USB key manufacturer's website.

Background information

This feature is in beta. If this feature does not appear in the Account Center, your account is not on the beta test list.

Attach a Guomi USB key

1. Log on to the Alibaba Cloud Account Center. On the Account Security page, find the Guomi USB key option and click Modify.

2. Identity verification is required. In the Verify identity dialog box that appears, select a verification method: Mobile phone verification, Alipay verification, or Facial recognition. For example, if you use mobile phone verification, click Send verification code, enter the verification code that you receive, and then click Verify now.

3. Confirm that the USB key environment is successfully verified.

4. Click Confirm Binding. In the dialog box that appears, enter the USB key password.

5. If the password is correct, a message indicates that the key is successfully attached.

Verify the Guomi USB key

After you attach a USB key to your account, you can use it for authentication during logon and for secondary authentication.

1. Insert the USB key into your computer and select Guomi USB Key Verification.

   On the Prepare environment page, confirm that Driver and Control installation are both complete and show a green check mark. Note: Before you use a Guomi USB key, attach the certificate to the Guomi USB key in the SSL Certificate console. The certificate is valid for one year.

2. Click Next to verify the USB key.

3. Enter the Guomi USB key password to log on.

4. After the verification is successful, the secondary authentication is complete.

Detach the Guomi USB key

You cannot detach the key yourself in the Account Center. To detach the key, submit a ticket and provide your identity verification documents. Our support team will detach the key for you.

Switch back to a virtual MFA device

You cannot attach both a virtual MFA device and a Guomi USB key to an account at the same time. If you want to switch back to using a virtual MFA device for secondary authentication after you attach a Guomi USB key, you must first detach the Guomi USB key and then attach a virtual MFA device.

1. Detach the Guomi USB key. You cannot detach the key yourself in the Account Center. To detach the key, submit a ticket and provide your identity verification documents. Our support team will detach the key for you.

2. After the Guomi USB key is detached, attach and use a virtual MFA device. For more information, see Bind or unbind a virtual MFA device.

Common USB key error codes