How do I install and use UIC VPN on MacOS?

Note: The use of this VPN solution requires you to enroll in the university’s 2-Factor Authentication (2FA) solution. 2FA provides an additional level of security to protect your resources. Getting started with Duo 2FA

Watch a video walkthrough of the installation and initial login process!

1. Download VPN Software

If you haven't enrolled in the university's 2-Factor Authentication (2FA), visit https://identity.uillinois.edu and follow the steps. You will need to be enrolled to connect to the VPN.

1. To download UIC’s AnyConnect VPN software, navigate your browser to https://go.uic.edu/getVPN, add the offering to your cart, and checkout (note: there is no charge for this software).
2. On the resulting order confirmation page, select to download the AnyConnect client for MacOS. Save the file at an easily findable location, such as your desktop or downloads folder.

2. Install the VPN Software

1. Install the software with the steps below.
   1. Find the downloaded file on your computer (typically in your Downloads folder).
   2. Double click anyconnect-macos-xxxxxxxx-predeploy-k9. It will open a standard MacOS installer. Click AnyConnect.pkg.
      
      
       
   3. At the Introduction, click Continue.
      
      
       
   4. Accept the License Agreement and click Continue and then Agree.
      
      
       
   5. At the Installation type screen, click Install.
      
      
       
   6. You will be prompted to allow the application to install - you must have administrator rights on your computer to allow this to proceed. Click Install Software to finish installing the software.
      
      
       
   7. Technology Solutions team recommends you uncheck all of the extra components circled in green:
      
      
       
   8. Depending on your settings, you may encounter this warning that will guide you how to enable the system extension in your System Preferences panel:
      
      
       
   9. After the warning prompt, this error will appear. Click on Open Security Preferences.
      
      
       
   10. Click Allow.
       
       
        
   11. You will receive confirmation that the extension was enabled. Click Dismiss.
       
       

3. Run the VPN software

1. Once installed, find the Cisco AnyConnect application from one of two areas:
   1. In your Launchpad:
      
      
       
   2. In the Application folder, find the Cisco folder, then click AnyConnect Secure Mobility Client.
      
      
       
2. This will launch the AnyConnect Secure Mobility Client.
   1. Type vpn.uic.edu into the space provided.
   2. Click Connect.
      
       
       
3. You will need to enter your credentials to connect to the VPN. The application will remember your Group and Username. Next time you use the VPN, you will only need to re-enter your UIC common password and the 2FA method of your choice.
   
    
    
   1. The Group will be pre-selected as General-Use, but you may want to change this (you will need to change the group in order to access Library resources). Review What group should I use for AnyConnect VPN? .
   2. In the Username field type your UIC NetID 
   3. In the Password field type your UIC common password.
   4. In the Second Password field, what you enter will depend on the 2FA method you want to use. Follow the instructions below for the method of your choice:
      • Type push if you have the Duo App installed in your smart phone, then click OK. Your phone will prompt you to authorize the login request via the Duo app. Approve the login request to proceed. For more information about the Duo mobile app, see  2FA - Installing the Duo Mobile app.
      • Or type phone if you want to receive a phone call to your registered phone number, then click OK. Answer the call and follow the instructions given.
      • Or type sms if you want to get a code via text message to your registered mobile device, then click OK. Your login attempt will ‘fail’ and you will be prompted to login to AnyConnect again. This time, re-enter your common password, and in the Second Password field enter the 6-digit code received via the text message. Note: the passcode expires after 5 minutes.
      • If the above methods do not work for you, or you prefer not to use them, you can also directly enter the 6-digit code generated by your Duo mobile app or your registered OTP C100 physical token.
      • To use the Yubikey model physical tokens, click within the Second Password field, and press the button on the Yubikey device. This will enter a long set of characters, and you can then click OK to log in.
         
      •    
         
4. The AnyConnect Secure Mobility Client will appear again, confirming your connection.