The Duo Device Health application analyses a device to assess the status of its security posture and reports the results of this scan to Duo. During authentication, Duo applies and enforces access policies using the device's security posture information. When access is denied by Duo due to the state of security posture on the device, the Duo Device Health application receives the results of the policy check and presents guidance for the user to remediate the issue and successfully login the next time.
The home screen of the Duo Device Health application performs a health check on the system and reports information to the user about the state of the device.
The health check will be performed anytime the application is opened from the menu bar (macOS) or the system tray (Windows). (Refer below for example images Mac OS on left and Windows on Right)
Table of Contents
Installing Duo Health
|
Duo Device Health supports the following platforms: Windows 10 and 11 client editions, including Enterprise, Pro, and Home. macOS 10.13 and later |
To install Duo Health,
- Visit the Deakin Software Library and install Duo Health
- Click on the Duo Device Health App link
- You can find the links to download the macOS and Windows 10 versions of Duo Health under "Other Install Methods".
- Open the downloaded file and follow the onscreen instructions
DUO Health Checks
This health check provides your preferred Duo device security posture. By keeping all of these health checks green, Duo helps users keep a secure system and alleviates issues that may arise before authentication is required. If this check reports an issue, such as the firewall being turned off or OS being out of date, users have the opportunity to perform remediation before attempting to authenticate.
For Deakin managed Windows and Mac workstations, the health checks are managed by Deakin Digital Services
Below is a macOS example Health Check Alert with Remediation Guidance
Device Remediation
When an issue is reported by the Duo Device Health application, a red exclamation point will be shown next to the item that has an issue. This can happen as part of the standalone health check or as a report from an authentication failure due to device health.
If a user is attempting to access an application with a Device Health blocking policy, and their endpoint's security posture does not comply with the policy requirements, then the Duo Prompt notifies the user that they must take action before they can access the application.
The Duo Device Health application automatically opens with information about why the authentication was denied.
Each non-compliant setting shown is a clickable item, that directs the user to instructions on how to fix the problem.
Additionally, there is a link at the bottom that will take you to a page in the application that briefly explains why keeping the device healthy is important.
Troubleshooting & FAQ
What macOS versions does Duo Device Health support?
The Duo Device Health application supports macOS 10.13 and newer
What Windows versions does Duo Device Health support?
Windows 10 client editions, including Enterprise, Pro, and Home.
Does the Duo Device Health application require elevated or administrative privileges?
Duo Device Health installation requires administrator privileges on both Windows and macOS. During installation, if the user doesn't have admin rights, they'll get prompted to provide credentials of an account that is able to install software on the client.
Once installed, the application should run in the normal user context, without administrator rights.
Which browsers support Duo Device Health during authentication?
Google Chrome for the most seamless user experience. Internet Explorer 11, Safari, and Opera are also known to work without issues.
Firefox ESR version is not supported.
How do I uninstall the Device Health app?
Uninstalling the application requires administrator privileges on both Windows and macOS. macOS Users:
- Click the Finder icon from the dock
- Locate the "Duo Device Health" app in the list of applications.
- Right-click the "Duo Device Health" app and select Move to Trash.
- Optionally, right-click the Trash icon and select Empty Trash.
Windows 10 users:
- Go to Start → Settings.
- Click Apps & Features.
- From the list, select the "Duo Device Health" application and click Uninstall.