BoilerKey required for Purdue website CAS authentication, including benefits open enrollment, as of Oct. 30

Screenshot of the CAS portal that on Oct. 30 will require BoilerKey, Purdue's version of two-factor authentication. Screenshot of CAS portal where BoilerKey will be required on Oct. 30.

On Oct. 30, 2018, all faculty, staff and students will be required to use BoilerKey, Purdue’s version of two-factor authentication, to sign in to CAS-authenticated webpages, such as myPurdue, Blackboard, Kronos, Ariba and Concur.

Faculty and staff who plan to enroll for benefits on or after Oct. 30 also will need BoilerKey to access the enrollment portal.

Likewise, students will need to sign up for BoilerKey by Oct. 30 to be able to register for classes.

If you are already signed up for BoilerKey, you can begin to use it on CAS websites now. To do so, go to purdue.edu/boilerkey, select “Where I use my BoilerKey,” and select “Require BoilerKey for CAS.” If you sign up for CAS after Oct. 8, the system will turn on BoilerKey for CAS automatically. 

After the Oct. 30 deadline, no setting change is needed. The employee portal, Purdue’s virtual private network (VPN) and all CAS-authenticated pages will automatically require BoilerKey to create a more secure environment for university and personal data. Two-factor authentication is like a second line of defense for cybercriminals looking to scam someone out of their credentials. 

“As a large university, cybercriminals are consistently trying to break into Purdue’s network for sensitive information,” says Greg Hedrick, chief information security officer. “One of ITaP’s functions is to keep Purdue’s network and data protected and therefore we are rolling out BoilerKey to all faculty, staff and students.” 

BoilerKey adds an additional layer of security when logging in. It’s a step above traditional passwords, because not only must users remember something (a PIN or password), but they must also physically possess something that confirms their identity, either a smartphone with an app or a hard token, such as a key fob, both available in BoilerKey’s case. 

If you already have BoilerKey, you will begin using it on CAS-authenticated pages on Oct. 30. If you do not yet have a BoilerKey, go to purdue.edu/boilerkey to sign up today. 

For BoilerKey assistance:  

Writer: Kirsten Gibson, technology writer, Information Technology at Purdue, 765-494-8190, gibson33@purdue.edu

Last updated: October 5, 2018