You are here

Setup Procedure of HKUVPN with 2-Factor Authentication (2FA) for Windows Phone

1. Prerequisite
2. Configuration Procedures
3. Connection Procedures


1. Prerequisite

  1. With effect from 4 January 2016, 2-factor authentication (2FA) by making use of HKU Portal UID/PIN and a one-time password is required for accessing the HKUVPN service. You can register to use 2FA through the online form-
  2. Staff (except visiting, honorary and hourly-paid staff who can use alternate email address only) can choose to receive the token code either through a registered alternate email address or a Mobile App.

  3. Students and departmental account holders will receive the token code via their registered alternate email address.

  4. For staff who chooses to use 2FA Mobile App (FortiToken), please follow the procedure at http://www.its.hku.hk/documentation/guide/infosec/2fa/app-token to install the 2FA Mobile App (FortiToken).

  5. Please uninstall any earlier version of Cisco Anyconnect VPN client before you start the following installation.

2. Configuration Procedures (to be done once only)

Note: The following steps are prepared based on Windows Phone 8.1 Update (Version 8.10.14219.341)

  1. From App list, select Store.
    Store
     
  2. In the search box, type “anyconnect” and then tap the app AnyConnect.
    Search app
     
  3. Tap Install.
    Install app
     
  4. After installation, Tap Home button and then Tap Settings from the App list.
    settings
     
  5. Tap VPN.
    vpn settings
     
  6. Tap “+” button from the bottom of the screen to add a new connection profile.
    add profile
     
  7. Enter the following information:
    - Server name or IP address: vpn2fa.hku.hk
    - Type: Anyconnect
    - Username: <Your HKU Portal UID>
    - Password: <Your HKU Portal PIN>
    - Move the slider next to Server certificate validation to On and then choose “GeoTrust” from the list.
    - Move the slider next to Connect automatically to Off.
    - Tap Save.
    profile setup 1

    profile setup 2

    profile setup 3

3. Connection Procedure

  1. From App list, Tap Settings and then tap VPN.
    VPN setting
     
  2. Move the slider next to Status to On.
    Turn on VPN
     
  3. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap continue.
    VPN login
     
  4. (i) Applicable to staff/students who choose EMAIL TOKEN

    You will receive an email containing the 6-digit email token to your registered alternate email address. The token is valid for 5 minutes after its sent out time.

    token-email

    (ii) Applicable to staff who choose APP TOKEN

    Please retrieve the app token from your mobile device. The token is valid for 1 minute after it is obtained.

    Note: For installation of the 2FA Mobile App (FortiToken), please refer to http://www.its.hku.hk/documentation/guide/infosec/2fa/app-token.

    To retrieve the app token-
    • Open FortiToken Mobile.

      FortiToken Mobile

    • Enter your PIN of 4 digits to unlock the app.

      enter pin

    • App token will be retrieved.

      app token

  5. Enter a 6-digit One Time Password in Answer field and then click Continue
    input token
     
  6. You are now connected to HKUVPN.
    Success Connection
     
  7. To disconnect from HKUVPN server, move the slider next to Status to Off
    disconnect