Connection Procedure of HKUVPN with 2-Factor Authentication (2FA)

After successful one-time configuration, please follow the connection procedure below for connecting to HKUVPN.

(Note: There may be slight variation in the connection procedure on different platforms.  Below are the generalized connection procedures for Windows/Mac.)

1. For those using one-time password (token code) sent to alternate email address

  1. Open the Cisco AnyConnect program.
  2. Enter “vpn2fa.hku.hk” in the dialogue box box and click Connect button.
  3. vpn_connect_01
  4. Input your HKU Portal UID and PIN under Username and Password respectively.
  5. vpm_connect_02
  6. Input the 6-digit token code sent to your alternate email address in the “Answer” field and click “Continue”.
  7. vpn_connect_03

    vpn_connect 04

2. For those using one-time password (token code) sent to 2FA Mobile App (FortiToken) (applicable to staff except visiting staff, hourly-paid staff and honorary appointees)

  1. Open the Cisco AnyConnect program.
  2. Enter “vpn2fa.hku.hk” in the dialogue box box and click Connect button.
  3. vpn_connect_01
  4. Input your HKU Portal UID and PIN under Username and Password respectively.
  5. vpm_connect_02
  6. Input the 6-digit token code sent to your alternate email address in the “Answer” field and click “Continue”.
  7. vpn_connect_03 vpn_connect 04
  8. Open the Cisco AnyConnect program.
  9. Enter “vpn2fa.hku.hk” in the dialogue box box and click Connect button.


  10. vpmn_connect_05
  11. Input your HKU Portal UID and PIN under Username and Password respectively.
  12. vpn_connect_06
  13. Retrieve the app token from your mobile device which will remain valid for 1 minute.Note: For installation of the app token, please refer to here.
  14. vpn_connect_07
    On Android devices- On iOS devices-
    • Open FortiToken Mobile.
    • vpn_connect_08
    • Open FortiToken.
    • vpn_connect_10
    • Enter your 4-digit PIN or use biometric authentication to unlock the app.
    • vpn_connect_11
    • Enter your 4-digit PIN or use biometric authentication to unlock the app.
    • vpn_connect_11
    • App token will be retrieved.
    • app token
    • App token will be retrieved.
    • app token
2
2

MFA

Multi-Factor Authentication

February 2024
February 2024

Mandatory for all staff accounts

May 2024
May 2024

Mandatory for all student accounts