Setting up VPN access under Chromebook
Installing the Cisco Secure Client
- Click on the round circle at the bottom left of the taskbar and open the PlayStore.
- Search for "Cisco Secure Client" in the PlayStore and install it.
- Click on "Open" to start the VPN program.
Initial setup of the Cisco Secure Client
- When you start the app for the first time, you will be informed of the display size of the app. You can confirm this with "Ok" [Fig. 1].
- Confirm the license terms with "Ok" [Fig. 2].
- You can now decide whether you want to allow the Cisco Secure Client to send you notifications. Permission is optional, but recommended [screenshot 3].
- Now click on Connections [Fig. 4].
- To create a new connection, click on the plus symbol [Fig. 5].
- Now enter the data as shown in the screenshot. The description is freely selectable. Enter "vpngate.uni-koeln.de" as the server address and click on "Done" [Fig. 6].
- Now click back on "Connection selection".
Activation of the VPN connection
- Click on the slider to activate the VPN connection [Fig. 1].
- You will be redirected to the Shibboleth authentication. Enter your user name and password there [Fig. 2].
- Confirm your login in Shibboleth using multi-factor authentication with your smartphone, tablet or hardware token (the interface varies slightly depending on how multi-factor authentication is set up) [Fig. 3].
- Finally, click on "Open" to return to the app [Fig. 4].
- You are now connected to the VPN. To disconnect, simply click on the slider again [Fig. 5].
Troubleshooting
Error message "Not enrolled in Duo"
If you receive an error message with the title "Not enrolled in Duo" during multi-factor authentication, then you have not yet set up multi-factor authentication.
Information on setting up multi-factor authentication can be found here.
Message in Cisco Duo "Enter bypass code"
If you are asked to enter a bypass code, it is very likely that the initial registration of your device for multi-factor authentication has not been completed. Contact the ITCC helpdesk and ask to be able to carry out the initial registration again.
Then make sure that you do not interrupt the initial registration process at any point the next time.