You are here

Setup Procedures for HKUVPN with 2-Factor Authentication (2FA) for Android Devices

1. Prerequisite
2. Configuration Procedures
3. Connection Procedures


1. Prerequisite

  1. With effect from 4 January 2016, 2-factor authentication (2FA) by making use of HKU Portal UID/PIN and a one-time password is required for accessing the HKUVPN service. You can register to use 2FA through the online form-
  2. Staff (except visiting, honorary and hourly-paid staff who can use alternate email address only) can choose to receive the token code either through a registered alternate email address or a Mobile App.

  3. Students and departmental account holders will receive the token code via their registered alternate email address.

  4. For staff who chooses to use Mobile App, please follow the procedure at http://www.its.hku.hk/documentation/guide/infosec/2fa/app-token to install the Mobile App.

  5. Please uninstall any earlier version of Cisco Any Connect VPN client before you start the following installation.

  6. AnyConnect ICS+ (VPN client) is compatible with Android devices running Android 4.0 or above.

2. Configuration Procedures (to be done once only)

  1. Go to Play Store

    play store

  2. In the search box, type "anyconnect ics" and choose the app AnyConnect ICS+.

    anyconnect ics

  3. Tap Install.

    install

  4. Tap Accept to kick off the installation.

    accept

  5. After installation, tap Open to launch the application.

    open

  6. When you open the application for the first time, you will be prompted to read the license agreement. Tap OK to accept.

    click ok

  7. Tap Connection to add a VPN profile.

    tap connection

  8. Tap Add New Connection....

    add new connection...

  9. Under Connection Editor-
    1. Tap Description.

      tap description

    2. Type "VPN2FA" in the Description field and tap OK.

      type VPN2FA

    3. Tap Server Address.

      tap server address

    4. Type "vpn2fa.hku.hk" in the Server Address field and tap OK.

      type vpn2fa.hku.hk

  10. Tap Done to complete the setup.

    click done

3. Connection Procedures

  1. Tap AnyConnect icon on your device to open the VPN client.

    AnyConnect

  2. Tap AnyConnect VPN to start the connection.

    Tap AnyConnect VPN

  3. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap Connect.

    UID, PIN and click Connect

  4. (i) Applicable to staff/students who choose EMAIL TOKEN

    You will receive an email containing the 6-digit email token to your registered alternate email address. The token is valid for 5 minutes after its sent out time.

    email token

    (ii) Applicable to staff who choose APP TOKEN

    Please retrieve the app token from your mobile device. The token is valid for 1 minute after it is obtained.

    Note: For installation of the mobile app, please refer to http://www.its.hku.hk/documentation/guide/infosec/2fa/app-token.

    To retrieve the app token-
    • Open FortiToken Mobile.

      FortiToken Mobile

    • Enter your PIN of 4 digits to unlock the app.

      enter pin

    • App token will be retrieved.

      app token

  5. Enter the 6-digit One Time Password in the Answer box and click Continue.

    Type 6-digit One Time Password

  6. Tap OK to accept the Connection Request.

    Tap OK

  7. You are now connected to HKUVPN.

    Connected to HKUVPN

  8. To disconnect from HKUVPN server, tap AnyConnect VPN.

    To disconnect HKUVPN

  9. You are now disconnected from HKUVPN server.

    Disconnected to HKUVPN