Home → CRL IT Knowledge Base → DUO 2FA → Endpoint Instructions (PC/Laptop)
4.1. Endpoint Instructions (PC/Laptop)
Last updated: Wed Jun 2026 09:40 PM (EDT)
Important: If you have a CRL-H laptop or PC, you must use the DUO Mobile app on your phone to log in. You do not have to enroll your phone into CRL-H to use DUO Mobile.
Step 1 — Install DUO Mobile
If you don’t already have it, install the DUO Mobile app on your phone:
iPhone — App Store
Android — Google Play
Look for the DUO logo, then download and install it following your device’s normal steps.
Step 2 — First login
Log in to your CRL asset (or unlock your PC) using your CRL email address and password.
If you haven’t activated Offline Login yet, you’ll be prompted to do so every time you sign in. You can choose Enroll Later to skip it, but that is not recommended — if you skip it, you will not be able to log in when the PC is offline.
Step 3 — Windows Offline setup (one time)
This one-time setup syncs the DUO Mobile app on your phone with your PC, so you can still log in with a passcode when the PC has no internet connection.
On the PC: leave the default option (Duo Mobile Passcode) selected and click Activate Now. A QR code appears.
Pause here — you’ll need your phone for the next step.
On your phone: open the DUO app, tap the + (Add Account), and select Use QR Code.
Point your phone’s camera at the QR code on the PC screen to create the Windows Offline token.
You can give it a more meaningful computer name or accept the default. This creates a second token on your phone labeled Windows Offline.
Back on the PC: click Enter Offline Code.
On your phone, open the Windows Offline token you just created and read the passcode. Enter that passcode on the PC (no spaces) and click Activate Offline Login.
If you’re returned to the login screen, just log in as you normally would. Setup is now complete.
Step 4 — What to expect when you log in
From now on, logging in to a CRL-H enrolled asset starts the same way: enter your email address and password. What happens next depends on whether the PC is online.
If you’re online
After you enter your email address and password, the DUO prompt appears. Click Send Push to send an authentication request to your phone.
- The device or phone number the push went to is shown at the top.
- The Request ID is shown at the bottom of the push notification.
- Approve the push on your phone.
If you’re offline
The push will time out (or you can click Cancel), and you’ll need to choose Enter a Passcode.
- Open the Windows Offline token on your phone to get the passcode.
- Enter the 6-digit code and click Log In.
Offline logins are limited — the prompt shows how many you have left. They refresh automatically the next time you sign in while online, so connect to the network periodically.
Need help?
If you get stuck, submit a request to the CRL IT team.