You are here

User Guide on Remote Access via HKUVPN with 2-Factor Authentication (2FA)

The HKUVPN (Virtual Private Network) Gateway is a channel for accessing the Campus Network when users are outside the University network.   This service is available to current staff and students, supporting a secure connection for them to access the electronic resources such as email, licensed web resources and faculty intranets in the same way as if they are within the University network.  


  1. With effect from 4 January 2016, 2-factor authentication (2FA) by making use of HKU Portal UID/PIN and a one-time password is required for accessing the HKUVPN service. You can register to use 2FA through the online form-
  1. Staff (except visiting, honorary and hourly-paid staff who can use alternate email address only) can choose to receive the token code either through a registered alternate email address or a Mobile App.

  2. Students and departmental account holders will receive the token code via their registered alternate email address.

  3. For staff who chooses to use 2FA Mobile App (FortiToken), please follow the procedure at to install the Mobile App.

  4. After 2FA registration, please follow the one-time procedures below to install a VPN client and configure the PC/mobile device for using HKUVPN with 2FA.

  5. For those whose HKU Portal accounts were created before 5 JUNE 2009, if they haven’t used HKUVPN/WiFi before, they need to do an extra step to enable the use of HKUVPN/WiFi service via HKU Portal (type "wifi" in the search field and click the link "Register to Use WiFi service”).

Configuration Procedures

Please follow the procedures below to complete the one-time configuration for connecting to HKUVPN with 2FA.

Connection Procedures

Please follow the procedures below to connect to HKUVPN with 2FA.