Setup Procedures for HKUVPN with 2-Factor Authentication (2FA) for Android Devices

1. Prerequisite

  1. 2-factor authentication (2FA) is required for accessing the HKUVPN service.
  2. Please uninstall any earlier version of Cisco Any Connect VPN client before you start the following installation.
  3. AnyConnect ICS+ (VPN client) is compatible with Android devices running Android 4.0 or above.

2. Configuration Procedures (to be done once only)

  1. Go to Play Store.

    Go to Play Store

  2. In the search box, type “cisco secure client” and tap Install.

    In the search box, type “cisco secure client” and tap Install.

  3. After installation, tap Open to launch the application.

    After installation, tap Open to launch the application

    When you open the application for the first time, you will be prompted to read the license agreement. Tap OK to accept.

    When you open the application for the first time, you will be prompted to read the license agreement. Tap OK to accep

  4. Tap Connections to add a VPN profile.

    Tap the button with + icon

  5. Tap the button with + icon

    Tap the button with + icon

  6. Under Connection Editor
    1. Type “HKU VPN” in the Description field.
    2. Type “vpn2fa.hku.hk” in the Server Address field.
    3. Tap Done to complete.

      Tap Done to complete

3. Connection Procedures

  1. Tap AnyConnect on your device to open the VPN client.

    Tap AnyConnect on your device to open the VPN client

  2. Tap AnyConnect VPN to start the connection.

    Tap AnyConnect VPN to start the connection

  3. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap Connect.

    Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap Connect.

  4. (i) Applicable to staff/students who choose EMAIL TOKEN You will receive an email containing the 6-digit email token sent to your registered alternate email address. The token is valid for 5 minutes after its sent out time.

    Applicable to staff/students who choose EMAIL TOKEN You will receive an email containing the 6-digit email token sent to your registered alternate email address. The token is valid for 5 minutes after its sent out time

    (ii) Applicable to staff who choose APP TOKEN

    Please open the 2FA Mobile App (FortiToken app) on your mobile device. The token is valid for 1 minute after it is retrieved.

    (Note: Please refer to installation guide for the installation of 2FA Mobile App.)

    To retrieve the app token-

    o   Open FortiToken Mobile.

    Open FortiToken Mobile

    o   Enter your 4-digit PIN to unlock the app.

    Enter your 4-digit PIN to unlock the app

    o   App token will be retrieved.

    App token will be retrieved

  5. Enter the 6-digit One Time Password in the Answer box and click Continue.

    Enter the 6-digit One Time Password in the Answer box and click Continue

  6. Tap OK to accept the Connection Request.

    Tap OK to accept the Connection Request

  7. You are now connected to HKU VPN.

    You are now connected to HKU VPN.

  8. To disconnect from HKU VPN server, tap AnyConnect VPN.

    To disconnect from HKU VPN server, tap AnyConnect VPN.

  9. You are now disconnected from HKUVPN.

    You are now disconnected from HKUVPN

18
5

MFA

Multi-Factor Authentication

February 2024
February 2024

Mandatory for all staff accounts

May 2024
May 2024

Mandatory for all student accounts