Office of the Chief Information Security Officer

What is UCLA Duo Desktop

UCLA Duo Desktop is a lightweight application for your computer that performs a security Health Check on your device. This lightweight tool will assess your Windows or macOS workstation's security posture to ensure your system meets UCLA's security requirements (e.g., UCLA-approved anti-virus: Trellix) before you can access protected applications. Mobile devices, Linux, and non-Windows tablets are excluded from this requirement at this time and may access applications without the check.

Duo Desktop is part of the UCOP May 28, 2025, mandate. For additional information, please visit the UC Information Security Investment Plan & UCLA Requirements page.

What applications require Duo Desktop

UCLA is adopting a risk-based approach to enforcement with the Duo Desktop agent. Duo Desktop will validate that Trellix is installed when accessing high-risk applications that store, process, or transmit the most sensitive data (Level 4) as defined by UC Policy. This includes applications that deal with financial data, human resources and personnel information, student data, and/or critical IT applications.

The following applications will require Duo Desktop:

^{*Signing DocuSign envelopes will not require authentication via Duo Desktop + Trellix}

^{**Office 365 refers to the UCLA Enterprise Messaging instance only and includes all online Microsoft productivity apps including Outlook, OneDrive, etc. Locally-installed Microsoft Office applications are not impacted.}

Please visit the Trellix Endpoint Security (Antivirus) page for more information.

Please reference the Duo Desktop Getting Started Guide for detailed instructions and a step-by-step video to help guide you through the process.