Setup Procedure of HKUVPN with 2-Factor Authentication (2FA) for Windows 7/8.1/10

1. Prerequisite
2. Configuration Procedures
3. Connection Procedures

1. Prerequisite

1. With effect from 4 January 2016, 2-factor authentication (2FA) by making use of HKU Portal UID/PIN and a one-time password is required for accessing the HKUVPN service. You can register to use 2FA through the online form-
   • Staff: https://www.its.hku.hk/2fa/staff-register
   • Student/Department Account Holders: https://www.its.hku.hk/2fa/student-dept-register

2. Staff (except visiting, honorary and hourly-paid staff who can use alternate email address only) can choose to receive the token code either through a registered alternate email address or a Mobile App.

3. Students and departmental account holders will receive the token code via their registered alternate email address.

4. For staff who chooses to use Mobile App, please follow the procedure at https://www.its.hku.hk/documentation/guide/infosec/2fa/app-token to install the Mobile App.

5. Please uninstall any earlier version of Cisco Anyconnect VPN client before you start the following installation.

2. Configuration Procedures (to be done once only)

1. Download the VPN client from HKU Portal.
   • Login HKU Portal (https://hkuportal.hku.hk).
   • Type "vpn" in the search field.
   • Click the link Download HKUVPN Client.
   • Click the download link of VPN client for Windows 7/8.1/10 and click Run.  

   Alternatively, you can download the HKUVPN client by clicking here.

2. Click Next.

   

3. Select I accept the terms in the License Agreement and click Next.

   

4. Click Install.

   

5. In User Account Control window, click Yes to allow the installation of VPN client.

   

6. Click Finish to complete the setup.

   

3. Connection Procedures

1. Locate the Cisco AnyConnect Secure Mobility Client program from your Start Menu. You can also use Search  to find it.

   

2. Enter "vpn2fa.hku.hk" in VPN box and click Connect button.

   

3. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and click OK button.

   

4. (i) Applicable to staff/students who choose EMAIL TOKEN

   You will receive an email containing the 6-digit email token to your registered alternate email address. The token is valid for 5 minutes after its sent out time.

   

   (ii) Applicable to staff who choose APP TOKEN

   Please retrieve the app token from your mobile device. The token is valid for 1 minute after it is obtained.

   Note: For installation of the mobile app, please refer to https://www.its.hku.hk/documentation/guide/infosec/2fa/app-token.

   On Android devices-	On iOS devices-
   Open FortiToken Mobile.	Open FortiToken.
   Enter your PIN of 4 digits to unlock the app.	Enter your PIN of 4 digits to unlock the app.
   App token will be retrieved.	App token will be retrieved.

5. After successful connection, a VPN Logo with padlock will appear in system tray.

   

6. Click the VPN icon in the system tray and click Disconnect button to disconnect from HKUVPN Server.

   

R