Setup Procedure of HKUVPN with Multi-Factor Authentication (MFA) for iOS Devices

1. Prerequisite

MFA authentication (MFA) is required for accessing the HKUVPN service.
Only the Microsoft Authenticator App or SMS (Phone Text) are supported as sign-in methods for logging into the HKUVPN service. The phone call method is NOT compatible with HKU VPN. Please refer to the appendix for instructions on changing your default sign-in method to a supported option.
Cisco Secure Client (Formerly AnyConnect Secure Mobility Client) is required to run on iOS devices with iOS 10 or above. Please uninstall any earlier version of Cisco Anyconnect VPN client from your device before you start the following installation.

Go to App Store.
Type“cisco secure client” under the search box.
Tap Getnext to Cisco AnyConnect to download the app.
Double-click side buttonto kick off the installation.
After installation, open Cisco AnyConnect.
Tap Allow to allow the Notification.
To add a VPN profile, tap Connectionsand tap Add VPN Connection….
Under Add VPN Connection–
1. Type“HKU VPN” in the Description field.
2. Type“vpn2fa.hku.hk” in the Server Address field.
3. Tap Save to complete.
Tap Allow to add VPN configurations to your device

Tap AnyConnect icon on your device to open the VPN client.
Slide the button next to AnyConnect VPN to get connect to HKUVPN.
Enter your HKU email address (UID@hku.hk or UID@connect.hku.hk)and PIN in the Username and Password fields respectively and tap Connect.
(i) For users who choose Microsoft Authenticator App as the default sign-in method (The most common method):
- Open the Microsoft Authenticator app on your mobile device.
- Retrieve the One-time password (OTP).
(ii) For users who choose SMS (Phone Text) as the default sign-in method:
- You will receive an SMS containing the One-time password (OTP) on your registered phone number.
- The OTP is valid for 3 minutes from the time it is sent. Retrieve the OTP from the SMS.
The 6-digit One Time Password (OTP) in the Answer box and click Continue.
You are now connected to HKUVPN.
To disconnect from HKUVPN server, slide the button next to AnyConnect VPN.
You are now disconnected from HKUVPN server.

Visit your Microsoft 365 account settings at https://myaccount.microsoft.com/
Sign in using your HKU credentials.
Go to the “Security info” section.
Set “App-based authentication – Notification” as your default sign-in method under the section titled “You’re using the most advisable sign-in method where it applies.”