You are here

Setup Procedure of HKUVPN with 2-Factor Authentication (2FA) for iOS Devices

1. Prerequisite
2. Configuration Procedures
3. Connection Procedures

1. Prerequisite

  1. 2-factor authentication (2FA) is required for accessing the HKUVPN service.
  2. Cisco AnyConnect (VPN client) is required to run on iOS devices with iOS 6 or above. Please uninstall any earlier version of Cisco Any Connect VPN client from your device before you start the following installation.

2. Configuration Procedures (to be done once only)

  1. Go to App Store.

    App Store

  2. Type "cisco anyconnect" under the search box.

    cisco anyconnect

  3. Tap Get next to Cisco AnyConnect to download the app. (For older devices with IOS 9 or below, please GET Cisco Legacy AnyConnect instead. The setup procedure is the same.)


  4. Tap Install to kick off the installation.


  5. After installation, open Cisco AnyConnect.


  6. Tap OK to enable the app.

    Tap OK to enable the app

  7. To add a VPN profile, tap Connections and tap Add VPN Connection....

    Connection and Add VPN Connection

  8. Under Add VPN Connection-
    1. Type "VPN2FA" in the Description field.
    2. Type "" in the Server Address field.
    3. Tap Save to complete.

    Add Description and Server Address

3. Connection Procedures

  1. Tap AnyConnect icon on your device to open the VPN client.


  2. Slide the button next to AnyConnect VPN to get connect to HKUVPN.

    Slide the button

  3. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap Connect.

    Enter UID, PIN and click Connect

  4. (i) Applicable to staff/students who choose EMAIL TOKEN

    You will receive an email containing the 6-digit email token to your registered alternate email address. The token is valid for 5 minutes after its sent out time.

    email token

    (ii) Applicable to staff who choose APP TOKEN

    Please retrieve the app token from your mobile device. The token is valid for 1 minute after it is obtained.

    Note: For installation of the mobile app, please refer to

    To retrieve the app token-
    • Open FortiToken.


    • Enter your PIN of 4 digits to unlock the app.

      enter pin

    • App token will be retrieved.

      app token

  5. Enter the 6-digit One Time Password in the Answer box and click Continue.

    6-digit one time password

  6. You are now connected to HKUVPN.


  7. To disconnect from HKUVPN server, slide the button next to AnyConnect VPN.

    Slide the button

  8. You are now disconnected from HKUVPN server.