Initial DUO 2 Factor Setup, Install, Login and Verification

Transcription

1 Please read this entire document it contains important instructions that will help you with the setup and maintenance of your DUO account. PLEASE NOTE: Use of a smartphone is the fastest and simplest way to use DUO. Smartphone Setup: 1 - Install Duo on your smartphone iphone - mobile/id ?mt=8 Android Once the app is installed, click on the URL in the SMS text that was sent to you 2. If you see the UCSF logo with a green (ios) or grey (Android) key next to it, please complete the client setup and verification instructions in the sections below. If you don t see the UCSF logo or encounter any other problem please contact Service Desk. Once your Duo account and smartphone (or other device) are setup, you will need to log into VPN with Duo in order to complete the full activation process. You can do this either through the Junos Pulse 2 Factor VPN Client on your workstation or via remote.ucsf.edu. New Juno Pulse 2 Factor Client Setup It is very likely that you currently have the single factor version of the Juno Pulse client installed on your computer (you will know this if it only requires an AD ID and your password) if this is the case, you will need to uninstall it and install the 2- factor version. Instructions follow below: Complete the following steps 1. Uninstall the Junos Pulse single factor client. a. For Mac Drag the application from the Application folder to the Trash. b. For Windows Open the Control Panel and select Programs and Features. 1

2 Uninstall the four programs listed below. c. Please see the below screen shot and uninstall all four files of Juniper Networks. 2. Once you have uninstalled the single factor client, click on appropriate two factor Junos Pulse client installer from the software.ucsf.edu website: virtual- private- network After installing the application, open the Junos Pulse application and then click on the Connect button. 1. Login using your Campus, SOM or Medical Center AD ID and password. Note that you must use your Active Directory (AD) credentials; your SF ID will not log you into the Junos Pulse client. 2. Once the initial login is completed, you will be prompted for a second login. Press the key icon to get the second password (a numeric string) from the Duo mobile application on your smartphone or enter your bypass code if provided. 2

3 Alternatives (Only if you are using a smartphone or have registered you office phone number): You can also type the "push" (no double quotes) and Duo will ping your smartphone app for approval. Type the "sms1" (no double quotes) and Duo will text different passcodes via sms, choose and enter as a secondary password. Type the "phone" (no double quotes) and Duo will phone your smartphone for approval. Office/ Landline Users: Follow the verification process below. Make sure that the phone number you are planning to use has been set as the default device. You will also have to use the "phone" (no double quotes) command; DUO will then call the first phone number listed for second factor approval. 3

4 Web portal Remote.ucsf.edu Login to the web portal: You can also login to the VPN website. This site will also allow you to also manage your devices. Steps Step 1 Go to the following website Enter your Active Directory (AD) user ID for your username and your AD password. Once you have entered your username and password, click on the log in button. 4

5 Steps (continued) Step 2 You will then be directed to a page that prompts you to log in using two- factor authentication. Select the Device. Choose the one of the options; fill in the passcode field if you have a bypass code. Click the Log In button. Steps (continued) Step 3 If you see the following screen, you have successfully completed your first VPN login using your new Duo 2 Factor login account. 5

6 Notice the Manage devices button This will allow you to add additional devices such as a tablet, additional smartphone, landline, etc. The Actions button will allow you to edit, delete and set priority for each device. 6