Information Security

Articles (149)

Pinned Article Why am I receiving a "not enrolled" error when trying to access my UIC email (Exchange/Outlook), a Microsoft Office application, Box, or Qualtrics?

This error message is received when you attempt to access a Microsoft 365 application such as Exchange, Outlook, or Teams, or the U of I Box or Qualtrics services, but are not enrolled in the university's Duo 2FA service. 2FA is a required part of authenticating to Microsoft 365, Box, and Qualtrics, effective 8/16/21.

Can an auditing student obtain a UIC NetID?

Explains why auditing students cannot obtain a NetID

Can I change my NetID?

Explains how someone might be able to change their NetId

Can I keep my account when I leave UIC?

The account will expire once you leave UIC.

Can I request an extension of access to Technology Solutions services?

Explains how someone can request an extension of Technology Solutions sevices

Can I use a Chinese (Country Code +86) phone number with Duo 2FA?

Phone numbers with a +86 country code can no longer be used with Duo 2FA

Can someone help me change my password without me coming to the university?

In some cases, it may not be possible to come to campus to reset a forgotten password.

How can a former student with an expired affiliation view his/her account billing, tuition information, or 1098-T?

How a former student with an expired affiliation can view his/her account billing info using their enterprise login

How can a former student with an expired affiliation view his/her transcripts?

How a former student with an expired affiliation can view his/her transcripts using their enterprise login

How can I access Enterprise applications when the UIC NetID is expired?

Accessing Enterprise applications (tuition, pay bill) when the UIC NetID is expired

How can I change my existing password?

Instructions how an user can update their password through the identity portal.

How can I create an email account?

Provides users with guidance on how to create an email account.

How can I enroll in 2FA while on campus?

Access to NESSIE, Banner, and several other services from off-campus requires the use of two-factor authentication (2FA). Below are the resources to help you enroll in the program:

How can I find my department's Phonebook Contact or REACH representative?

Each department should have at least one Phonebook Contact and two REACH representatives with one primary assigned. Find your Phonebook Contact and REACH representative by following the process below.

How can I find out which Technology Solutions accounts I currently have active?

The UIC Account Portal will list your current Technology Solutions active accounts

How can I install the Duo Mobile app?

We recommend you use a smartphone as your primary 2nd factor device. The Duo Mobile app allows you to approve your connections at any time with just a swipe and a click on your smartphone. If you are setting up Duo for the first time, we recommend installing the Duo Mobile app on your mobile device first.

How can I know if the email I received saying that I need to change my expiring password is legitimate?

Explains how someone can verify the legitimacy of an email claiming that the password is about to expire

How can I learn more about 2FA?

The University of Illinois uses a 2-Factor authentication (2FA) service provided by Duo Security, an industry leader in cyber security services. This will help secure your account and the University's sensitive data. The University of Illinois is committed to securing its institutional data and the personal information of everyone at the University.

How can I recover or change the password to my secondary NetID?

Explains how to change the password to your secondary NetID if you no longer remember it.

How can I request a two week UIC account extension?

Accounts extension to retrieve data once the university affiliation expires

How can I set my preferred name in UIC systems?

If you want to adjust how your name appears (including removing your middle name and/or setting a different first name) in the UIC online directory and other systems, you will need to update your "preferred first name" (PFN).

How can I set up and schedule scans in Qualys?

A step by step guide for creating, running, and scheduling vulnerability scans in Qualys

How can I set up non-university Email address to receive 2FA temporary passcodes?

Set up a Non-University email address to receive a temporary passcode in the event you forget or can't access your 2FA device. This will prevent a call to the Service Desk.

How can I Troubleshoot a Digital Certificate?

A chained cert is one file that contains all of the certs either in forward or reversed order. That is your server cert, the intermediate cert(s), and the root cert. Depending on what format you need, using a text editor, you'll want to combine the certificate files.

How can I update my Emergency Email from a Satellite Campus?

Template to use once a satellite campus emergency email is updated per the request of the user's Phonebook Contact.

How can I use 2-Factor Authentication (2FA) while traveling internationally?

The default 2FA options can incur data charges for text messages, phone calls, or accessing the Duo Mobile application while you are outside of the USA. However, there are options to avoid this.

How can I use a 2FA Temporary Code?

This article explains how to receive and use a 2FA temporary code when you are not able to access your enrolled 2FA device.

How can I work around the Bluestem Invalid Credentialkey error?

Clients may sometimes receive an "Invalid Credentialkey" error when attempting to authenticate into a UIC application/service. This document contains instructions and a response template on how to work around this error.

How do I access my.UIC portal? is a University of Illinois at Chicago portal for incoming students which serves student administrative needs.

How do I access the DeptUpdate page?

Designated Phonebook Contacts are able to access the DeptUpdate page

How do I access the PbUpdate page?

Designated Phonebook Contacts are able to access the PbUpdate page

How do I access W-2 and other tax forms for current and terminated or retired employees?

University Payroll & Benefits (UPB) is responsible for issuing Form W-2, Wage and Tax Statements. This article links to UPB page with the details on how to access those electronic forms.

How do I activate Duo Mobile 2FA on my device?

There are two ways to complete the activation of your mobile device with Duo. You may use your phone camera to scan an on-screen barcode, or you can have an activation link emailed to you.

How do I activate my NetID as a student or external affiliate?

To access many authenticated university services and create accounts, new students, faculty, and staff must first activate their UIC NetID.

How do I activate my UIC NetID?

Explains how new students/faculty can activate their NetIDs

How do I add a device to Duo 2FA?

This document will instruct you on adding personal devices and phone numbers to Duo.

How do I add a new employee to the Directory?

How to add a new employee to the directory

How Do I assign Liaison Roles for the Department that I am a Delegate Authority For?

Instruction of how a delegate authority assigns liaison roles for their department

How do I become a UIC Liaison for my department?

A Delegate Authority in each unit can assign and update UIC Liaisons (REACH, Phonebook contacts, Network Security, EcoReps and Webmasters) by using the

How do I check or update my password recovery options?

Explains how a UIC student, faculty or staff can review and/or modify their password recovery options.

How do I create a strong NetID password?

A response template for clients who have trouble creating a password that meets the requirements in

How do I download my Certificate of Achievement for KnowBe4 training?

A step by step guide on download and viewing your certificate after finishing training in KnowBe4

How do I edit the "Also Known As" and "Keywords" link in DeptUpdate?

Instructions on editing the "also known as" and "keywords" link in DeptUpdate

How do I encrypt using MBAM?

Once the client has been installed, you'll be automatically prompted to encrypt your machine. This period is around 24 hours.

How do I enroll a new phone/new phone number in Duo 2FA?

Prepare now before you get a new phone number or forget your mobile device! Go to the NetID Center Select Log in - Under Recovery Settings select Edit Settings. Add or update the non-university email address in order to get a temporary passcode sent to your email if necessary.

How do I expire an external affiliation?

Provides instructions for phonebook contacts, department liaisons, or department personnel on how to expire affiliations for external affiliations.

How do I expire or remove an employee from the UIC Directory?

This article explains how to expire or remove an employee from the directory using PBUpdate if you are an authorized Phonebook Contact.

How do I find my department's UIC liaisons?

Use the Department's A-Z search and search by your campus unit or use the Technology Solutions Liaison Manager to find your department's liaisons

How do I find my Phonebook Contact person?

To locate the Phonebook Contact liaison(s) for your department, visit the following link:

How do I generate a CSR from Windows using the certificate MMC Certificate MMC access?

Generate a CSR from Windows using the certificate MMC
Certificate MMC access

How do I generate the Certificate Signing Request (CSR) for my SSL certificate?

Only University faculty or staff members my request SSL certificates.

How do I get an activation token as a student?

The best form to acquire an activation token by a student is given below.

How do I get help with my suspended account?

Account suspension can occur for many reasons, but the most common would be that suspicious activity has been detected on one of your NetID accounts.

How do I get started with Duo 2FA?

Getting Started with 2FA Enrollment.

How do I install a Bluestem client on a Linux server?

This guide explains how to install the Bluestem client on a Linux (CentOS 7) server.

How do I install and configure a Shibboleth Service Provider?

The article provides detailed information regarding how to install and configure shibboleth.

How do I install MBAM?

This article details how to install Microsoft Bitlocker Administration and Monitoring (MBAM).

How do I manage my 2FA devices?

Step by Step guide on How to Manage your 2FA (2-factor authentication) Devices.

How do I manage my passwords with a password manager?

Password managers can help you remember and secure all of your passwords.

How do I obtain a TLS or SSL certificate?

Only University faculty or staff members may request SSL certificates.

How do I obtain a UIC NetID?

Explains how new students and faculty can get a net Id

How do I obtain access to Blackboard for non-UIC affiliates?

Explains how non UIC affiliates can get access to Blackboard

How do I register 2FA while off-campus?

Following these steps, you will be able to register for 2FA while away from the campus network.

How do I report a suspicious or threatening email?

Describes how to report emails to Technology Solutions so we can examine the email.

How do I request a NetID change?

Explains how a user can request a NetID change.

How do I request a PHI folder in Box?

The University of Illinois has signed a Business Associate Agreement (BAA) with The BAA allows the UofI the ability to provide Box Health Data Folders for the secure sharing and storage of health information. Only employees, volunteers, trainees, and other persons under the direct control of the University are eligible to apply for a BHDF.

How do I request Shibboleth (SAML) integration?

Shibboleth Integration is available to full time or part time employees at the University of Illinois at Chicago who have a valid UIC NetID.

How do I restrict access to web pages with Bluestem?

This article details how to restrict access to web pages using Bluestem.

How do I resync my NetID password?

If you find that your NetID password is working for some systems but not others, it may be useful to try a password resync. This means that you will change your password to the same thing that it is currently set to so that your current password is sent to all systems.

How do I run a report in Qualys?

How to create and run a vulnerability report in Qualys

How do I set my default device & automatic authentication method for Duo 2FA?

Step by Step guide on how to set your default device and automatic authentication method.

How do I set my Enterprise password?

new password, identity management

How do I set up accounts for affiliates?

Departments can set up UIC NetIDs for external affiliates. There are two steps:

How do I set up Duo 2FA?

Step by Step guide on 2FA (2-factor authentication) self-enrollment.

How do I set up or update password recovery options?

Explains ways a person can update or recover their password

How do I Upgrade my Browser to Meet TLS Security Protocols?

In order to maintain the highest security standards, promote the safety of data, and align with industry-wide best practices, UIC students, faculty and staff using an older browser will no longer be able to access web-based services including,, and Microsoft Office 365 and must upgrade their browser.

How do I use DeptUpdate?

DeptUpdate is used to update the departments Directory listing that can be found in the A-Z Listing.

How do I use Microsoft 365 Security?

How to use the features of Microsoft 365 Security

How do I use PbUpdate?

Explains how designated Phonebook Contacts can use PbUpdate

How do I utilize the Event Logging service?

Provides answers to frequently asked questions about using Technology Solutions's Event Logging service, provided via Splunk software.

How is an Emeritus affiliation assigned?

This article provides information on how to obtain Emeritus or Emerita status.

How is Asset tagging within Qualys used at UIC?

UIC's Asset tagging naming convention for use in Qualys.

How is Shibboleth used at UIC?

Shibboleth (SAML) is a framework that allows applications to connect to various authentication services on the Internet (including UIC's Bluestem SSO).

How long can I keep my accounts after I leave UIC?

Information on Technology Solutions's grace period policy for UIC NetIDs

I am from a remote campus, how can I get password assistance?

For password assistance at Peoria or Rockford, contact your local UIC Phonebook (PB) Contact liaison.

I forgot my password and now it has expired. Can I create a new password without knowing the old password?

Explains how a user can create a new password when he/she doesn't know the old one

I forgot my password, what should I do?

Passwords can be recovered using self-service options or in a C-stop location in campus.

Is there a List of SAML (Shibboleth) supported applications at UIC?

This article lists 3rd party applications supported by UIC Bluestem Single Sign-On via SAML technology (Shibboleth).

Is there an alternate/workaround for employee NetID activation?

This is to be used ONLY for EMPLOYEES when their phonebook contact reports that UI New Hire was unsuccessful. Or, there was an issue using HR Front End and the employee needs an alternative to activate their NetID.

My password expired while I was away. What should I do now?

Explains what a person should do if their password expired.

Should I set up Remote Desktop Protocol Firewall rule in Windows?

Here we show how to set up firewall rules in Windows, both locally and via GPO.

What antivirus software is available to me for my personal device?

UIC no longer has an antivirus solution available for use on personal devices.

What are 2FA hardware tokens?

Hardware tokens are small, portable devices that you can use to log into UI Verify, the university's 2-factor authentication system. Most people are able to log into UI Verify using their personal cell phone with either SMS text messaging or via the Duo app. But if you cannot or do not want to use your personal device for 2FA, then a hardware token purchased from WebStore is recommended.

What are common issues with encryption?

This article details common issues associated with encryption.

What are PGP Public and Private Keys?

This article details what Pretty Good Privacy (PGP), PGP Keys, and PGP Whole Disk Encryption work.

What are some Frequently Asked Questions about Duo 2FA?

Commonly asked questions regarding 2FA.

What are the available 2FA authentication methods & devices?

The authentication methods and devices available for 2-factor authentication (2FA).

What are the costs for the Event Logging service?

The Event Logging service is self-supported, and there are two primary costs.

What are the features and requirements of Directory Services?

The UIC Directory is an online directory of current UIC students, faculty and staff. The Directory also includes a complete listing of campus units and unit rosters.

What are UI Hospital contacts?

Hospital Security Contacts

What can I do if I'm locked out of an Active Directory Account?

Explains how an account can end up locked and how it can be unlocked

What do I do now that I have been assigned as Phonebook Contact for my department?

Congratulations! You have been assigned to be your department's Phonebook Contact (PbContact/PB). Rest assured this article will provide instructions and guide you on what you need to function in your new PbContact/PB role.

What do I do once I am appointed as an Emerita/Emeritus ?

Explains to the user what to do once appointed as an Emerita/Emeritus.

What do I do once my password expires?

Any current user can recover and update their password once it is expired.

What do I need to know about web security, restricted access, and Bluestem?

This article addresses general web security questions and how to restrict access to websites using Bluestem at UIC.

What happens to my NetID and email if I take a semester off?

Explains what happens to a student's netID if they take a semester off

What if I get an Enterprise Login issues error?

If you get this error message when logging into the Enterprise System "You've successfully logged in, but something's wrong with the link you've used. Please contact the Service Desk " you should navigate to <a href=""></a> to access the UI Enterprise System. <p>See the image below:</p>

What is 2FA Remember Me?

2-factor authentication (2FA) is an extra layer of security for your sensitive, personal university data.

What is 2-Factor Authentication?

2-factor authentication (2FA) is an extra layer of security protection for your sensitive, personal university data.

What is a 2FA Temporary Passcode and how can I use it?

If you have lost, forgot, or can not access your 2FA device, you can request a temporary passcode. This passcode is good for 3 days and 100 uses. You can request 24 passcodes per calendar year. These can be requested if you are going to a testing center and will not have access to your 2FA device.

What is an external affiliation?

External affiliations, by definition, are those whose NetIDs are not created by student admission processes or in relation to departmental hiring procedures, and/or whose status cannot be verified by student and employee data that can be collected from Banner.

What is DeptUpdate used for?

Explains how designated Phonebook Contacts can use DeptUpdate.

What is HIPAA?

HIPAA stands for "Healthcare Insurance Portability and Accountability Act".

What is my NetID?

Your Network ID (NetID) is a network login assigned to you that is unique across all University of Illinois campuses. It serves as your login to many University computing and networking services.

What is my UIN?

Explains what a NetID is

What is Qualys Cloud Agent and how do I use it?

How to use Qualys Cloud Agent's features and a guide to what the Cloud Agent can do.

What is Qualys Global IT Asset Inventory and how do I use it?

Qualys’s Global IT Asset Inventory is a system built into Qualys that allows you view and organize all the assets in a unit.

What is Qualys Threat Protection and how do I use it?

A summary of what is the UIC Qualys Threat Protection module how to use it.

What is Safe Links and how does it help protect me?

Safe Links is part of Microsoft's Defender platform and helps better protect you from malicious links in emails. Safe Links checks URLs to see if they are malicious or safe before loading the web page. If the URL leads to an attachment, the attachment will be scanned for malware. If the URL is identified as insecure, the user is taken to a page displaying a warning message.

What is Symantec Encryption Desktop? (formerly known as PGP Desktop Encryption)

Your data deserves protection. The UIC license for Symantec Encryption Desktop provides easy to use and secure encryption to protect sensitive data on your laptop or desktop computers. Laptops are easily lost, and even desktop computers can be stolen. Symantec Encryption Desktop also includes a secure shredder, to really delete files you want to delete. A major motivation for using Symantec Encryption Desktop is to fulfill HIPAA requirements.

What is the difference between a NetID and an Enterprise ID?

Authentication using either your NetID or EnterpriseID based on the campus service.

What is the difference between my NetID and UIC email address?

Your UIC email address is not the exact same thing as your NetID.

What is the difference between NetID and Enterprise ID?

Explains the differences between NetIDs and Enterprise IDs

What is the password for my email alias?

An email alias is a NetID without associated accounts; therefore, it does not have a login or password associated with it.

What is the Qualys Vulnerability Scanner?

An overview of Qualys a network vulnerability scanner

What should I do if I received an email saying that I need to change my expiring password?

Explains what someone should do if they receive an email telling them that their password is about to expire

Where can I find PGP Desktop Encryption guides?

Symantec Encryption/PGP documentation for Windows and MacOS.

Where can phonebook contacts go for support documentation on using the UIC phonebook/directory?

Departmental phonebook contacts have access to the UIC Wiki that explains how to work with these tools.

Where does the "Department" name for an individual come from when it is displayed in the online Directory?

We have a long list of valid orgs. This list contains the legal name, banner org/department code and an ID (used to keep track of the org/department) for every UIC org/department.

Why am I unable to login to My UI Info after my password change?

Some of the browser cookies, which My UI Info (NESSIE) uses, can interfere with a login attempt if the password was recently changed.

Why can't I log in to UIC applications?

This article details why users may have issues with logging into UIC applications, specifically the error "Error calling Bluestem.VerifyAuth: Code execution error: Method Bluestem.VerifyAuth returned error: Invalid credentialkey."

Why do I need to use Duo 2FA for student direct deposit?

Students are required to protect their information by setting up Two Factor Authentication (2FA) for direct deposit refunds.

Why has my Emerita/Emeritus appointment not been updated in the phonebook?

Emerita/Emeritus affiliations are not added until the appointment is confirmed by the BOT

Why is Duo 2FA "Remember Me" not working?

The Remember me feature of Duo Mobile works for most people most of the time. However, it is not 100% reliable because the feature relies on web cookies of a particular type, and the web browser you are using must accept this type of cookie. This article describes common situations in which you may need to authenticate with Duo 2FA each time you log in.