Connect to HUB using UB-Owned Computer and Duo Two-Step Verification

Learn how to connect to HUB from your office computer or a UB-owned laptop. 

Operating System: All

Applies To: UB faculty, staff and researchers

Last Updated: July 1, 2020

Security keys and Touch ID are not compatible with this connection method.

1. Get ready

  1. Obtain pre-authorization for HUB administrative access from the HUB Leads
  2. Complete the Handling Data Safely training

2. Get VPN software

Your system administrator will install Cisco AnyConnect VPN client software on your UB-owned computer.

3. Connect

1. Select Start > All Programs > Cisco > Cisco AnyConnect VPN Client > Cisco AnyConnect VPN Client.

2. The first time you connect, you must enter vpn.buffalo.edu in the Connect to field. Click Select

  • A window may pop up asking "Do you trust this remote connection?" If so, click Connect.
  • A window may pop up alerting you that "The identity of the remote computer cannot be verified." If so, click Yes.
Choose 2Step-AdminVPN, 2Step-AdminVPN-offcampus, or 2Step-AdminVPN-Instructor, then enter your UBITName and UBITName password and click OK.

3. From the Group drop-down menu, select one of the following:

  • 2Step-AdminVPN if you are on campus.
  • 2Step-AdminVPN-OffCampus if you are off campus
  • 2Step-AdminVPN-Instructor if you are an instructor

4. Enter your UBITName in the Username field.

5. Enter your UBITName password in the Password field.

6. Click OK.

4 or fewer devices (250 characters or less), enter the number of the device you want to use or a passcode. 5 or more (more than 250 charaters), enter a passcode or else enter the response for the enrolled device you want to use (e.g., push1 or phone1) Your options may appear different than those shown, depending what applications you enrolled in Duo.

7. In the Answer field:

  • Enter the device number (e.g., 1 through 4) or device alias (e.g., push1, etc.) that corresponds to the verification method you wish to use
    OR
  • Enter a passcode

Note: Device aliases may appear if you have 4 or more devices enrolled in Duo. You can look up a list of your enrolled devices and their aliases by logging into the Duo Two Step Verification Manager and choosing VPN Device Aliases.

Common questions

How long may I stay connected to the VPN?

You may stay connected for up to 24 consecutive hours of use before you are disconnected. Your connection may remain idle for up to 3 consecutive hours before you are disconnected

Why do I need to confirm with Duo each time?

Duo with VPN does not have "remember me" functionality.

How can I access administrative functions of HUB when MyUB is unavailable?

If MyUB is not available, access administrative functions of HUB at https://www.admin.hub.buffalo.edu.  

See also

Still need help?

Contact the UBIT Help Center.