How do I (re)enroll my smart device or code-generating key to MFA?

Duo MFA key htop

If you have deleted the Duo app, the UMS profile, or replaced your phone, you can use the following steps to (re)enroll your smart device. If your code-generating key is generating nonfunctioning codes, please check "MFA - I entered my code from my code generator or Duo app, but it doesn't work" to correct that problem.

INFO: To (re)enroll your device, you will need another MFA authentication method. If you do not have another authentication device, or backup codes, you can contact the UMS Help Desk to obtain a Bypass Code.

WARNING: It is VERY IMPORTANT that these instructions be followed using a Web Browser on a Desktop or Laptop and NOT using the Web Browser on the smart device you are attempting to re-enroll or enroll for the first time.

Using the browser on the device you are attempting to enroll WILL NOT WORK.

Instructions

Using a computer: Go to https://accounts.maine.edu/ in a web browser and select "Manage Multi-factor Authentication".
Use the "Manage Devices" button to bring up the Duo Device Manager application. It will most likely require you to re-authenticate.
When MFA is prompted for, you may need to select "Other options" to choose a method you can use successfully.

Duo Push Prompt with "Other options"

If needed, select the type of your "backup" authenticator. Select "Bypass code" if you are going to use a nine-digit backup code or bypass code supplied by the help desk. (The list of options you see may be different.)

Duo List of authentication options

You should be able to use the "I have a new phone" option on your existing device entry to reactivate the profile on your smart device. The "Let's set up your phone" dialog will pop up. Activate the "Get started" button and skip to step 8.

Duo listing of smart device, including "I have a new phone" option. Duo Phone or Tablet setup popup dialog

If "I have a new phone" is not present or does not work, you can enroll a new device (and remove the non-functional device afterward)
A dialog similar to the following will be presented as a pop-up. Select the type of device to add (in this case, "Duo Mobile").

INFO: If you wish to enroll a Hardware MFA Token you'll need to follow the instructions in "How Do I Register a Code Generator token for use with MFA?" instead.
If re-enrolling an existing Duo Mobile device or adding a new one, the following popup dialog will appear. UMS suggests using the "I have a tablet" link instead of providing a phone number, as Duo does not need to know your phone number (we do not support MFA via SMS or call-back).
If you need to install the Duo Mobile App on your device go ahead and do that now. Make sure you've installed the "Duo Mobile" application and not any of the other applications whose name starts with "Duo". Once ready to continue, activate the "Next" button.
The QR code presented in the next dialog (obfuscated example shown below) can be scanned inside of the Duo Moble App. Upon opening the App use the "+ Add" function and then activate the "Use QR code" option found at the top of the screen. It will use the device's camera from inside of Duo Mobile itself (you do not need to open a camera App). If the device in question does not have a camera or is unable to scan the QR code then using "Get an activation link instead" will help attempt enrollment that way.
If you have not already done so, create backup codes and store them someplace safe. Doing so ensures that you can correct most MFA issues yourself, without needing to contact the Support Desk.