Setup Procedure of HKUVPN with 2-Factor Authentication (2FA) for iOS Devices

1. Prerequisite

  1. 2-factor authentication (2FA) is required for accessing the HKUVPN service.
  2. Cisco Secure Client (Formerly AnyConnect Secure Mobility Client) is required to run on iOS devices with iOS 10 or above. Please uninstall any earlier version of Cisco Anyconnect VPN client from your device before you start the following installation.

2. Configuration Procedures (to be done once only)

  1. Go to App Store.
  2. Go to App Store.

  3. Type cisco secure client under the search box.
  4. Type cisco secure client under the search box

  5. Tap Get next to Cisco AnyConnect to download the app.
  6. Tap Get next to Cisco AnyConnect to download the app

  7. Double-click side button to kick off the installation.
  8. Double-click side button to kick off the installation

  9. After installation, open Cisco AnyConnect.
  10. After installation, open Cisco AnyConnect

  11. Tap Allow to allow the Notification.
  12. Tap Allow to allow the Notification

  13. To add a VPN profile, tap Connections and tap Add VPN Connection….
  14. To add a VPN profile, tap Connections and tap Add VPN Connection….

    To add a VPN profile, tap Connections and tap Add VPN Connection….

  15. Under Add VPN Connection
    1. Type HKU VPN  in the Description field.
    2. Type vpn2fa.hku.hk  in the Server Address field.
    3. Tap Save to complete.
  16. Tap Save to complete.

  17. Tap Allow to add VPN configurations to your device
  18. Tap Allow to add VPN configurations to your device

3. Connection Procedures

  1. Tap AnyConnect icon on your device to open the VPN client.
  2. Tap AnyConnect icon on your device to open the VPN client

  3. Slide the button next to AnyConnect VPN to get connect to HKUVPN.
  4. Slide the button next to AnyConnect VPN to get connect to HKUVPN.

  5. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap Connect.
  6. Enter your HKU Portal UID and PIN in the Username and Password fields respectively and tap Connect.

  7. (i) Applicable to staff/students who choose EMAIL TOKEN You will receive an email containing the 6-digit email tokento your registered alternate email address. The token is valid for 5 minutes after its sent out time.
  8.  Applicable to staff/students who choose EMAIL TOKEN You will receive an email containing the 6-digit email tokento your registered alternate email address. The token is valid for 5 minutes after its sent out time.

(ii) Applicable to staff who choose APP TOKEN

Please retrieve the app token from your mobile device. The token is valid for 1 minute after it is obtained.

Note: For installation of the mobile app, please refer to https://www.its.hku.hk/documentation/guide/infosec/2fa/app-token.

4. To retrieve the app token

  1. Open FortiToken.
  2. Open FortiToken
  3. Enter your PIN of 4 digits to unlock the app.
  4. Enter your PIN of 4 digits to unlock the app

  5. App token will be retrieved.
  6. App token will be retrieved

  7. Enter the 6-digit One Time Password in the Answer box and click Continue.
  8. Enter the 6-digit One Time Password in the Answer box and click Continue.

  9. You are now connected to HKUVPN.
  10. You are now connected to HKUVPN.

  11. To disconnect from HKUVPN server, slide the button next to AnyConnect VPN.
  12. To disconnect from HKUVPN server, slide the button next to AnyConnect VPN.

  13. You are now disconnected from HKUVPN server.
  14. You are now disconnected from HKUVPN server.

46
14

MFA

Multi-Factor Authentication

February 2024
February 2024

Mandatory for all staff accounts

May 2024
May 2024

Mandatory for all student accounts