Frequently Asked Questions
What's actually changing?
We will be changing how you access the UIS Mainframe/GALAXY. You will no longer need your SecurID token (key fob that generates a 6 digit code) to authenticate into a terminal emulator (Host on Demand/HOD, Reflections, Mocha etc.) and instead will need to first connect to the
two-factor VPN which will require
Duo Security. Duo is currently used to login to BUworks, and select other services. After connecting to the two-factor VPN, you can then connect to the UIS Mainframe/GALAXY and will only be prompted to enter in your userid and password.
When is this changing?
Beginning the morning of Sunday, October 1, 2017.
After this change, do we still need our secureID tokens?
No, you won’t.
Can I still access the UIS Mainframe/GALAXY from Off Campus?
Yes, you can. All you need is to be connected to the
two-factor VPN, and then access a terminal emulator.
Host on Demand can be accessed from your web browser. Other emulators, such as Mocha, can be installed by Desktop Services, or your departmental IT group.
When I FTP to/from the Mainframe, will I still need to use the 6 digit token number in my password?
No, you won’t. You will need to be on the 2fa VPN connection first, but you will no longer need to added the token code to your password
What if I have a static IP? Will I have any issues?
If you have a static IP, which you use to access IP restricted systems/applications and aren’t sure how this will affect you, then we recommend you reach out to
buinfosec@bu.edu for consultation. While on the
two-factor VPN, your system will have a different IP address, so anything you need to access with your static IP address may not connect. In most situations, we would simply recommend disconnecting from the
two-factor VPN, and accessing your restricted systems/applications with your static IP as usual. We also suggest that we look at the restricted system/application you need your static IP address for, and determine if we can also allow the two-factor VPN address space access to these systems/applications as well.
Who can use the 2fa vpn group? Do I need special access for this?
Anyone can connect to the 2fa vpn group as long as you have a valid BU Kerberos ID and password, and an account in Duo.
I am regularly connected to the AD-ADMIN vpn group. Will I need to disconnect and then connect to the 2fa vpn group to access UIS Mainframe/GALAXY?
No. The AD-ADMIN vpn group will be given the same access as the 2fa vpn group, so you will not have to disconnect/reconnect.
How do I get a new device/phone added to my DUO account
While you can manage your own devices within DUO, the Service Desk can help you with this at any time. You can contact the IT Help Center at 353-HELP or ithelp@bu.edu. For more information about working with DUO please visit
https://www.bu.edu/tech/support/duo/
