1. Prerequisite
- 2-factor authentication (2FA) is required for accessing the HKUVPN service.
- Please uninstall any earlier version of Cisco Anyconnect VPN client from your PC before you start the following installation.
2. Configuration Procedures (to be done once only)
- Download the VPN client for Windows from here.
- Click Next.
- Select I accept the terms in the License Agreement and click Next.
- Click Install.
- In User Account Control window, click Yes to allow the installation of VPN client.
- Click Finish to complete the setup.





3. Connection Procedures
- Locate the Cisco AnyConnect Secure Mobility Client program from your Start Menu. You can also use Search
to find it.
- Enter “vpn2fa.hku.hk” in VPN box and click Connect button.
- Enter your HKU Portal UID and PIN in the Username and Password fields respectively and click OK button.
- (i) Applicable to staff/students who choose EMAIL TOKEN You will receive an email containing the 6-digit email token to your registered alternate email address. The token is valid for 5 minutes after its sent out time.
- Open FortiToken Mobile.
- Open FortiToken.
- Enter your PIN of 4 digits to unlock the app.
- Enter your PIN of 4 digits to unlock the app.
- App token will be retrieved.
- App token will be retrieved.
- After successful connection, a VPN Logo with padlock will appear in the system tray.
- Click the VPN icon in the system tray and click Disconnect button to disconnect from HKUVPN Server.




On Android devices- | On iOS devices- |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |

