Over the next few months, a more secure connection method for the U-M Virtual Private Network (VPN) will be introduced, and the current method will be retired. The new method will direct people to Weblogin, and two-factor authentication using Duo will be required.
The addition of two-factor to the U-M VPN login will improve security for U-M networks. This will improve trust for things like library resources licensed for U-M use that are made available only from U-M networks.
Use AnyConnect to connect with Duo
Mac, Windows, iOS, and Android users will use the Cisco AnyConnect app to connect to the VPN. To connect, they will open the app, which will take them to Weblogin. They will log in there as usual and be prompted to complete two-factor (Duo) authentication. Login for Linux users will be slightly different, but will also include Duo.
The new connection method is expected to be released in December. ITS documentation explaining how to get the app and connect to the VPN will be updated at that time. New users will use the new method from the beginning. Users of the current method will be able to continue using it for several months.
Users will have time to transition
Once the new connection method has been released, ITS will begin communicating with current VPN users to let them know they will need to change how they connect to the VPN. Those users will receive several reminder emails over several months to give them plenty of time to make the change. The current connection method will likely be turned off sometime in February 2020.
ITS staff members will work with IT staff members in campus units that manage their own computers to help ensure a smooth transition in those units.
About MiWorkspace devices
- MiWorkspace Mac devices will receive the AnyConnect app. Users will receive direct communication from MiWorkspace with further details.
- Most MiWorkspace Windows devices are equipped with an “always on” VPN client called DirectAccess that does not require separate software or login. These devices will not need the AnyConnect app, and people using them will not be prompted for two-factor (Duo) authentication.
