What is it and why use it?

Duo is a tool that provides two-factor authentication to better protect your account by requiring an additional piece of information beyond your username and password. When you access CSU VPN services (using both the Pulse Client and secure.colostate.edu) you will be required to use a device that you have (your mobile phone, desk phone, a hardware token, or other device) to provide an additional layer of security to your account. This is done by using the Duo Security app (on your smartphone) and receiving a push authentication request, or through a phone call or entering a generated code.

For detailed, step-by-step instructions on how to sign-up/enroll and add a device, please see:
https://www.acns.colostate.edu/media/sites/100/2018/04/Enroll-in-Two-Factor-Authentication.pdf

There are links at the bottom of the PDF to additional instructions on how to install & register a mobile device.

Please visit ACNS’ website to get started:
https://www.acns.colostate.edu/duo/

Once you have enrolled in Duo and activated a device and/or phone number, you may use the Pulse Secure client or Secure Gateway (https://secure.colostate.edu) to connect to resources on-campus. See How-To’s below.

1. 1. 1. Download and install the Pulse Secure client.
      • Windows users:
        • 64-Bit Pulse Client manual installer
          (direct link)
      • Mac Users:
        • Pulse Client Manual installer (Mac OS X 10.8 and higher)
          (direct link)
      • Mobile Device users:
        • iPhone/iPad in the Apps Store (direct link)
        • Android/Chromebook in the Play Store (direct link)
      • Other options available:
        • https://www.acns.colostate.edu/security/
          scroll down to Pulse Connect Secure Gateway/VPN and expand Manual Installers
   2. 2. Once installed, launch the app so you can configure the connection:
      • Windows & Mac users: You should see an “S” icon near the clock, click on it and choose Open Pulse Secure.
      • Other devices, look in your apps for the Pulse Secure app.

1. 1. 3. Click the + in the connections section to add a new connection.

1. 1. 4. Type CSU for the Name and https://secure.colostate.edu/2fa for the Server URL then click the Add button.

 

Setup is finished. From now on, click on the Pulse Secure icon (by the clock or in the apps) to Open it

1. 1. 5. Click Connect in the CSU connection.
      If you get connection options and instructions, click Proceed.
   2. 6. A logon box will appear

1. 1. 7. Type your eName in the eID name field and your ePassword in the eID password field.
   2. 8. After signing in, you may see one of the following screens.

1. 1. 9. To approve the login using the Duo app on your smart phone/device,
      click Send Me a Push or type push in the box provided.
      – or –
      To have Duo call the phone number you registered to approve the login,
      click Call Me or type phone in the box provided.

On Windows & Mac:

1. 1. 10. When the client is active (tunneling traffic to the CSU network), the icon includes a green arrow:

1. 1. 11. Once the icon is displayed with the green arrow, the connection should be ready. You may launch the applications that require connectivity to CSU resources.
   2. 13. If the client is present but not active (not tunneling traffic to the CSU network), the icon does not have the green arrow:

Finding the host name of the computer you want to Remote Desktop to

1. On the computer you want to remote desktop to, find the host name by right-clicking Start and choosing System
   
2. Make sure you’re viewing the About section in the left pane, then look in the right pane for System info (you may need to make the window wider for it to show up).
3. The host name is listed to the right of Full computer name as shown below:
   

Using Microsoft Window’s built-in Remote Desktop

1. Click on Start. Start typing remote desktop and the following should appear:

2. Click on Remote Desktop Connection

3. Type the fully qualified domain name (FQDN) of your computer, the host name identified in step “C” above (e.g., MyComputer.cnrdom.colostate.edu), in the Computer field.
WCNR Students Only: type labcluster16.warnercnr.colostate.edu in the Computer field.

4. Click on Show Options

5. Specify your eName for the User name field formatted as COLOSTATE\eName

6. Click on the Display tab

7. Adjust the display resolution slider to your preference (all the way to the right will run Remote Desktop full screen).

8. If you have mulitple monitors, check the box to Use all of my monitors for the remote session.

9. Click the Connect button.

Using the Remote Desktop app from Microsoft Store (Windows), the Apps Store (iOS/MacOS), or Play Store (Android)

1. Get the free Microsoft Remote Desktop app for your device:
   • Mac OS – visit the Apps Store and search for/install the Remote Desktop 10 app by Microsoft
   • Windows – Click the Get button and choose Open Microsoft Store
   • iOS (iPhone/iPad)
   • Android/Chromebook
2. After the app is installed:
   • Windows/Android/Chromebook – tap/click the + in the upper-right corner.
   • iOS/MacOS – tap/click the Add PC button.
3. Type the fully qualified domain name (FQDN) of your computer, the host name identified in step “C” above (e.g., MyComputer.cnrdom.colostate.edu), in the PC name field.WCNR Students Only: type labcluster16.warnercnr.colostate.edu in the PC name field.

4. Tap/click the username list menu and specify your eName for the Username formatted as COLOSTATE\eName and your ePassword for the Password, otherwise you’ll be asked for this information everytime you launch remote desktop.
5. Make sure the Connect to admin session option is DISABLED, then click SAVE in the upper-right corner (Windows/Android), or Add (iOS/MacOS).From now on, you should see a tile listed with your computer name in the main Remote Desktop screen. Simply tap/click it and the Remote Desktop session will launch.

Using the web-based “Files” feature in the CSU Secure Gateway

1. Logon to the Secure Gateway at https://secure.colostate.edu
2. Type: \\acns.colostate.edu\wcnr-network in the field next to the browse button (upper-right corner of the screen), then click the Browse button.
3. An Attention prompt may show up and ask you to type in credentials to access server acns.colostate.edu.
4. Type your eName in the Username field, your ePassword in the Password field, and COLOSTATE.EDU in the Domain field, then click the Continue button.
5. The following directory structure should look familiar.
   
6. Click the Bookmark Current Folder icon in the upper-right corner.
   
7. Type WCNR-Network for the Bookmark Name and then click the Add Bookmark button.

From now on, you should see a bookmark listed under the Files  section called WCNR-Network

Clicking the link will take you to the N: drive directory structure as shown in step 5.

---

Windows: Mapping the N: drive while using Pulse Secure

1. Make sure you have the Pulse Secure client connected.
2. Click the Start button. Start typing map network and the following will appear:
3. Click on Map network drive
4. For the Drive: letter, choose N:.
5. For the Folder: path, type \\acns.colostate.edu\wcnr-network
6. Check the box Connect using different credentials and click the Finish button.
7. A dialog box will open prompting you to Enter network credentials.
8. In the User name field, type COLOSTATE.EDU\eName (using your eName!)
9. In the Password field, type your ePassword.
10. If you’re not using a shared computer, you may check the box to Remember my credentials if you wish.
11. Click the OK button.
    After some time, the N: drive should show up in File Explorer.

Mac: Mapping the N: drive while using Pulse Secure

1. Make sure you have the Pulse Secure client connected.
2. In Finder, choose Go from the menu, then click on Connect to Server…
   
3. Using your eName, type the following path in the box provided: smb://COLOSTATE.EDU;eName@acns.colostate.edu/wcnr-network
   
4. Click the Connect button.
5. If prompted, enter your credentials:
   

Using a “web bookmark” in the Secure Gateway to access the WCNR Intranet

1. Logon to the Secure Gateway at https://secure.colostate.edu
2. In the Web Bookmarks section, click the + to add a new bookmark:
   
3. A form similar to the one below will appear:
   
4. For the Bookmark Name, type: WCNR Intranet
5. For the URL, type: https://intranet.warnercnr.colostate.edu
6. Put a checkmark in the box to Open bookmark in a new window
7. Click the Add Bookmark button.From now on, you can simply click the WCNR Intranet link displayed in the Web Bookmarks section to visit the WCNR Intranet using the Secure Gateway:
   

---

Using the Pulse Secure client to access the WCNR Intranet

This method requires the Pulse Secure client is installed and connected.

1. Once you have the Pulse Secure client connected (as indicated by the “S” icon with a green arrow near the clock), open your browser (Chrome, Edge, Firefox, etc) and navigate to: https://intranet.warnercnr.colostate.edu/