...

• Server/connect to address: https://cn-vpn.uwaterloo.ca/

• Username: WatIAM ID

• Password: WatIAM password

• Second Password:

  • Type push for Duo Mobile push; enter ‘push2’ to receive the prompt on a secondary device, ‘push3’ to receive the prompt on a tertiary device, etc.

• Type sms for text codes; you will get a text message with 10 codes. Re-enter your password, and type the first code in the second password field.

• Type phone to get a phone call; enter ‘phone2’ to receive the prompt on a secondary device, ‘phone3’ to receive the prompt on a tertiary device, etc.

• For Duo hardware token or Duo app, enter the 6-digit code from the token or app

• For a Yubikey, touch the YubiKey with your cursor in the text box

How to install

1. To begin, log in to the VPN website with your WatIAM credentials.  Most can use https://cn-vpn.uwaterloo.ca/+CSCOE+/logon.html, but depending on where you are on campus, you may need to use https://vpn-inside.private.uwaterloo.ca. 
   Image RemovedOnce you enter your username and password,

   Image Added

   1. Second Password:

      • Type push for Duo Mobile push; enter ‘push2’ to receive the prompt on a secondary device, ‘push3’ to receive the prompt on a tertiary device, etc. To avoid multiple prompts on your phone, accept the push within 10 seconds.

      • Type sms for text codes; you will get a text message with 10 codes. Re-enter your password, and type the first code in the second password field.

      • Type phone to get a phone call; enter ‘phone2’ to receive the prompt on a secondary device, ‘phone3’ to receive the prompt on a tertiary device, etc.

      • For Duo hardware token or Duo app, enter the 6-digit code from the token or app

      • For a Yubikey, touch the YubiKey with your cursor in the text box

   2. Accept the Duo 2FA prompt on your device to continue to the next step.

2. Once the fields above are entered, you will be redirected to the Download & Install page shown below. Click the Download for macOS button to download the installer disk image.
   

3. Go to your  downloads folder  and double-click on the installer image, which will have a name such as  anyconnect-macos-4.6.01103-core-vpn-webdeploy-k9.dmg. This will mount and open the image and you should see the following window:
    

4. Double-click on the .pkg installer file and you will be taken through the installation process. Click Continue to move through the steps.
   

5. If you are running OS 10.14 (Mojave) you will get the following warning. Click OK to continue.
    

6. At some point in the installation you may get the below dialogue window. If so, click  Open Security Preferences  and enable Cisco software.  Note:  you may also get the "Cisco AnyConnect Secure Mobility Client Notification" shown below. In which case, click on the  Allow  button, which will also take you to the Security & Privacy settings dialogue. 
    

7. To authorize Cisco's apps, you will need to authorize them in the Security & Privacy settings shown below.
    

8. Click on the  lock icon  on the bottom left and enter your admin credentials to unlock so you can make changes.
   

9. Click on the Allow button to allow software from Cisco. After which you can close this preference window.
   

10. You should eventually get to the final screen shown below. Click Close.
    

11. Depending on your OS version you might get the following dialogue after closing the installer. Clicking on Move to Trash will delete the installer disk after closing. If you don't get the above option, you will have to eject the installer volume and delete the installer disk manually.
    

...

• cn-vpn.uwaterloo.ca: Accessed from off-campus and from wireless when on-campus

• vpn-inside.private.uwaterloo.ca: Accessed from on-campus, wired connections only
  
   

1. Select "cn-vpn.uwaterloo.ca" and click Connect. This brings you to a login window where you can authenticate with your WatIAM credentials. Under the 'Group' drop-down menu, select 'UW-General-Campus'. 
   Note: 'UW-General-Campus' is the recommended profile. 'UW-Campus' should be used as an alternative profile.

   Image Added

   1. Enter your 8-character username into the username field, not username@uwaterloo.ca or username@edu.uwaterloo.ca.Image Removed 
      

   Two-factor authentication (2FA) will be required in order to connect to the VPN starting November 17, 2020. In the 'Second Password' field, enter one of the following, then click OK.

   Successful authentication to the VPN client will result in the following dialogue appearing for a short time in the top-right corner of the screen. 

   1. For Duo Mobile push (app): 

   2. To avoid multiple prompts on your phone, accept the push within 10 seconds.

   Open your Duo app, select University of Waterloo, enter the code in the second password field [Recommended option], or

   3. Enter ‘push' or 'push1’ to send the prompt to your primary device, or

   Enter ‘

   Enter the Second Password:

   • Type push for Duo Mobile push; enter ‘push2’ to receive the prompt on a secondary device, ‘push3’ to receive the prompt on a tertiary device, etc.

   • For Duo hardware token: enter your 6-digit code

   • For Duo Bypass code: enter your bypass code

   For SMS codes: enter ‘sms’

   To avoid multiple prompts on your phone, accept the push within 10 seconds.

   • Type sms for text codes; you will get a text message with 10 codes. Re-enter your password, and type the first code in the second password field.

   • For Yubikey: enter the code generated by touching the Yubikey

   • For Phone Call: enter 'phone'

     Enter

     Type phone to get a phone call; enter ‘phone2’ to receive the prompt on a secondary device, ‘phone3’ to receive the prompt on a tertiary device, etc.

   • If you are not receiving Duo phone calls, you may have a setting that is blocking the phone calls. Some possible solutions include adding the Duo phone number, (306) 900-4884, to your device whitelist, or if the service is blocking unknown callers, add the Duo phone number as a contact on the device.

     1. iPhone: 'Silence Unknown Callers'

     2. Telus/Koodo: 'Call Control'

     3. Android: 'Block Unknown Callers'

     4. Call Control or Call Blocker app

     5. Any anti-spam service
        

2. Image Removed

3. 1. • For Duo hardware token or Duo app, enter the 6-digit code from the token or app

      • For a Yubikey, touch the YubiKey with your cursor in the text box

   2. Click ‘OK’ in the bottom-right.

   3.  Accept the Duo 2FA prompt on your device to continue.

4. Once you’ve accepted the 2FA prompt on your device, you should see the pop-up below in the top-right of your screen.

   

5. When the client is active, the VPN connection can be controlled from the Menu Bar icon:
    

Related articles

Need Help?