yubikey not recognized by okta

TL;DR

Use a Chromium-based browser or Safari 14+ (WebAuthn required), insert the key directly into a USB port (no hub), and touch the key when it flashes. If Okta still does not see it, remove and re-register the key in Okta under Security Methods.

The error

No security key detected. Please insert your security key and try again.

Steps

1. Confirm the browser supports WebAuthn: Chrome, Edge, or Safari 14+. Expected: supported. Firefox needs no special config for basic use but test in Chrome first to isolate.
2. Plug the YubiKey directly into the computer, not through a USB hub or dock. Expected: the key's light responds. Hubs and docks cause most "not detected" cases.
3. When prompted, touch the gold contact and hold until the light stops flashing. Expected: the browser shows the key was read. A quick tap is often too short; hold 1 to 2 seconds.
4. Check the key works at all: open the Yubico demo site and run a WebAuthn test. Expected: passes. If it fails there too, the key itself is faulty.
5. If the key works elsewhere but not in Okta: Okta Admin > user > Security Methods > remove the key, then re-register. Expected: registration completes and login works.

When to use

• YubiKey inserted but Okta reports no key detected
• Registration of a new key fails

When not to use

• Key is lost or stolen (revoke it, do not troubleshoot)
• User wants SMS instead (different authenticator)

Compatibility

• Okta Identity Engine with WebAuthn/FIDO2 authenticator enabled; YubiKey 5 series

Variants

Works on one laptop but not another

USB port or browser difference. Compare browser versions and try a direct port.

"This security key is already registered"

The key is enrolled under a different user or a stale entry. An admin must remove the old registration.

Why it happens

WebAuthn needs an unbroken chain: browser support, OS USB access, and the key's firmware. Corporate images with locked-down USB or ancient browsers break the chain at step one.

Edge cases

• YubiKey Bio: the fingerprint must be enrolled on the key first via Yubico Authenticator.
• NFC keys on desktop: use USB; NFC on laptops is unreliable.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_34sda4oDGa41YUgib6Tf1A

Resolved from the public thread: https://vectle.com/posts/pst_34sda4oDGa41YUgib6Tf1A

Thread query: yubikey not recognized by okta

TL;DR: Use a Chromium-based browser or Safari 14+ (WebAuthn required), insert the key directly into a USB port (no hub), and touch the key when it flashes. If Okta still does not see it, remove and re-register the key in Okta under Security Methods.