skip to content

IT Center University of Cologne (ITCC)

Installation and setup of the Cisco Secure Client for Linux

Installation

1 / 4
  • Enlarged view:
    You must log in with your student or personal account to download this file.
  • Enlarged view:
    Either open the folder in which the file was downloaded by clicking on "Show all downloads" in the browser under Downloads (varies depending on the browser) or navigate to the corresponding folder via the file explorer.
  • Enlarged view:
    Open a terminal in this folder by right-clicking -> Open in terminal. Alternatively, you can also open a terminal and switch to your download directory with cd /home/user/Downloads, for example.
  • Enlarged view:
    Install Cisco Secure Client by running the script with the command sudo bash cisco-secure-*.sh

  1. Download the Cisco Secure Client for Linux. A bash script is available which checks your Linux distribution for compatibility. You must log in with your student or personal account for this download [Fig. 1].
  2. You will need a terminal to install the package. Either open the folder in which the file was downloaded by clicking on "Show all downloads" in the browser under Downloads (varies depending on the browser) [Fig. 2] or navigate to the corresponding folder via the file explorer.
  3. Open a terminal in this folder by right-clicking -> Open in terminal [Fig. 3]. Alternatively, you can also open a terminal and switch to your download directory with cd /home/user/Downloads, for example.

  4. Now install Cisco Secure Client by executing the following command to start the script:

    sudo bash ./cisco-secure-*.sh

  5. After completing the command, you will find Cisco Secure Client in the list of your installed programs.

Note on Ubuntu 20.04

Please note: In version Ubuntu 20.04, it is not possible to open the terminal via the context menu in the respective folder. If this option is not displayed, open the terminal using Ctrl + T, for example, and switch to the relevant folder using the command "cd [folder path to file]".

Configuration & use

1 / 7
  • Enlarged view:
    Under your Linux distribution, search for "Cisco Secure" by clicking on the grid button at the bottom left in the case of Ubuntu (9 dots).
  • Enlarged view:
    Now enter "Cisco Secure Client" in the search field and click on the corresponding program.
  • Enlarged view:
    In the new window, enter "vpngate.uni-koeln.de" as the server address (without quotation marks) and then click on "Connect".
  • Enlarged view:
    You will be redirected to the Shibboleth login via your standard browser. If you want to change the tunnel type, minimize the browser window and select the tunnel type in the Cisco Secure Client dialog box.
  • Enlarged view:
    Then log in to Shibboleth with your user name and password.
  • Enlarged view:
    Confirm your login in Shibboleth using multi-factor authentication with your smartphone, tablet or hardware token (the interface varies slightly depending on how multi-factor authentication is set up).
  • Enlarged view:
    If the registration was successful, you will receive a message in your browser. You can now close it. If you are using multi-factor authentication (MFA), you will first be redirected to Cisco Duo.

  1. Under your Linux distribution, search for "Cisco Secure" by clicking on the grid button at the bottom left in the case of Ubuntu (9 dots).
  2. Now enter "Cisco Secure Client" in the search and click on the corresponding program.
  3. In the new window, enter "vpngate.uni-koeln.de" as the server address (without quotation marks) and then click on "Connect".
  4. You will be redirected to the Shibboleth login via your standard browser. If you want to change the tunnel type, minimize the browser window and select the tunnel type in the Cisco Secure Client dialog box.
  5. Then log in to Shibboleth with your user name and password.
  6. Confirm your login in Shibboleth using multi-factor authentication with your smartphone, tablet or hardware token (the interface varies slightly depending on how multi-factor authentication is set up).
  7. If the login was successful, you will receive a message in your browser. You can now close it.

Troubleshooting

Error message "Not enrolled in Duo"

expand:

If you receive an error message with the title "Not enrolled in Duo" during multi-factor authentication, then you have not yet set up multi-factor authentication.

Information on setting up multi-factor authentication can be found here.

Message in Cisco Duo "Enter bypass code"

expand:

If you are asked to enter a bypass code, it is very likely that the initial registration of your device for multi-factor authentication has not been completed. Contact the ITCC helpdesk and ask to be able to carry out the initial registration again.

Then make sure that you do not interrupt the initial registration process at any point the next time.

Difficulties using the client

You can find tips on troubleshooting when using the client on our help pages:

Special cases for use under Linux

Contact
If you have any questions or problems, please contact the ITCC-Helpdesk