Some field employee computers' internal clocks get out of sync with real time, which causes issues with Duo authentication that relies on accurate timing. Most of the time, the following steps will resolve it without any special visit to IT staff.

To access UEFI on a Microsoft Surface, follow the following steps:

1. Shut down your Surface and wait about 10 seconds.

2. Press and hold the volume-up button.

3. While holding the volume-up button, press and release the power button.

4. Continue holding the volume-up button until the UEFI screen appears.

When the UEFI appears (picture below), navigate to the date and time option on the left.

Open this link on your phone to have the time displayed on it: https://www.worldtimeserver.com/time-zones/est/

Set the new date and time (make sure to follow the format above it) to the exact second. For best results, type a time a few seconds ahead then press Enter the moment that time arrives on your phone.

Reboot the PC, connect to Wi-Fi, and try logging in.  If it fails, repeat the steps above one more time.  If it still fails, report what happened to IT.  In a few occasions, we've had to bring a device to one of the IT offices in Columbia for a brief hands-on session.