Downloading, Installing, and Connecting to Ivanti Secure Access Client App on Android or iOS Devices


Introduction

Secure Sockets Layer (SSL) virtual private network (VPN) provides secure remote access from one machine to restricted/private resources across a public network. Virginia Tech's SSL VPN service referred to as Remote Access VPN is a subscription based service that allows you to access Virginia Tech resources remotely across the globe. This service does not provide any end-to-end encryption to other services that are being accessed over VPN but does encrypt the traffic between your machine and the VPN device.

Top of page

Contents

Top of page

Top of page

Eligibility Requirements

Top of page

Supported Platforms

For security reasons, we ask users to upgrade their devices to the latest version and update them periodically to receive any patches for vulnerabilities. Network Infrastructure and Services (NI&S) is unable to support operating systems and devices that are no longer supported by the manufacturer. 

Top of page

Network Password and 2-Factor Authentication

Your Network Password is different from your regular VT Username passphrase. For instructions to get or reset it, see the View, Change, or Reset Network Password section of Changing or Resetting My Password.

The Virginia Tech Remote Access VPN service requires using 2-factor authentication. For more information, see Enrolling and Setting up Duo 2-Factor Authentication.

Top of page

Connection Options

Generally, b) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and doesn't slow down internet traffic to services outside of Virginia Tech. For more information, see the Which Connection Profile Do I Use? section of Remote Access VPN Frequently Asked Questions.

Top of page

Instructions

Download Ivanti Secure Access Client on Android

  1. Download and install the Ivanti Secure Access Client app.
    1. On your device, in the app store, search for Ivanti Secure Access Client.
    2. Tap the icon corresponding to the Ivanti Secure Access Client app that is appropriate for your device.
    3. Tap Install.
    4. If prompted to give permissions to the app, after reading the permissions, tap Accept.
    5. If prompted to update apps automatically, tap the button that corresponds to your choice.
  2. When the installation is complete, start the Ivanti Secure Access Client app.

Top of page

a) - All Traffic over SSL VPN on Android

  1. Verify that you are registered to use the Remote Access VPN service by following the instructions at see Registering Online for eduroam Wireless LAN Service.
  2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.
  3. Add the connection:
    • If this is the first connection you are adding to client:
      1. In the Corporate email or URL text box, type: vpn.nis.vt.edu/alltraffic.
      2. Tap Connect.
      3. In the Connection Name text box, type: a) - All Traffic over SSL VPN.
      4. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      5. Verify that Authentication Type is set to Password.
      6. Tap Add.
    • If you have existing connections in Ivanti Secure Access Client:
      1. On the Connections screen, in the center-right corner, tap the plus sign (+).
      2. In the Connection Name text box, type: a) - All Traffic over SSL VPN.
      3. In the URL text box, type: vpn.nis.vt.edu/alltraffic.
      4. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      5. Verify that Authentication Type is set to Password.
      6. Tap Add.
  4. Connect and enter your credentials.
      1. Under a) - All Traffic over SSL VPN, tap Connect.
      2. In the password text box, type your network password.
      3. Tap Sign In.
      4. Complete authentication with your 2-factor device
        (If your second factor device is unavailable or broken, see the How Do I Login without My Phone or Any 2-Factor Device if It Is Lost, Forgotten, Broken or Unavailable? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
        (If you have never enrolled in 2-factor authentication, you must do so before connecting to the VPN. For instructions, see Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.)
        • To use push notification:
          1. In the text box, type: push.
            (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, add a number to the end. For example, "push2" or "push3".)
          2. Tap Sign In.
          3. When the push notification appears, accept the Duo push notification. 
            (If the push notification does not appear, see the What Do I Do about Duo Mobile App Errors, Problems, Connection Issues, or Duo Push Not Received? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use SMS text message:
          1. In the text box, type: sms1.
            (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, add a number to the end. For example, "sms2" or "sms3".)
          2. Tap Sign In.
          3. You will see an error message saying: "Invalid secondary username or password. Please re-enter your user information." This is normal, because client must clear the Secondary password text box so that you can type a passcode. Tap Close.
          4. You will receive an SMS text message that starts with "SMS passcodes:" to your primary mobile phone. Open that text message. The text message will contain 10 different passcodes that are each 6-digits long.
          5. Under a) - All Traffic over VPN, tap Connect.
          6. In the Network Pwd text box, type your network password.
          7. Tap Sign In.
          8. In the text box, type one of the passcodes from the SMS text message.
          9. Tap Sign In.
          10. If prompted about creating a VPN connection, tap OK.
          11. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a voice phone call:
          1. In the text box, type: phone.
            (This will call the first voice-capable device that is enrolled in your Duo account. To have a different device called, add a number to the end. For example, "phone2" or "phone3".)
          2. Tap Sign In.
          3. The primary telephone number associated with your Duo account will ring. Answer the telephone.
          4. Press one of the number keys on the phone to confirm the authentication.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from the Duo mobile app:
          1. Start the Duo mobile app.
          2. In the Duo mobile app, tap the key.
          3. In the text box, type the 6-digit numeric passcode.
          4. Tap Sign In.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from a D-100 token or a software token:
          1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
          2. In the text box, type the 6-digit numeric passcode.
          3. Tap Sign In.
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
  5. When you are finished using the remote access - VPN, disconnect from it. To do this:
    1. Open the Ivanti Secure Access Client app.
    2. Swipe the connection to Disconnect.

Top of page

b) - VT Traffic over SSL VPN on Android

  1. Verify that you are registered to use the Remote Access VPN service by following the instructions at see Registering Online for eduroam Wireless LAN Service.
  2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.
  3. Add the connection:
    • If this is the first connection you are adding to client:
      1. In the Corporate email or URL text box, type: vpn.nis.vt.edu/vttraffic.
      2. Tap Submit.
      3. In the Connection Name text box, type: b) - VT Traffic over SSL VPN.
      4. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      5. Verify that Authentication Type is set to Password.
      6. Tap Add.
    • If you have existing connections in client:
      1. On the Connections screen, in the center-right corner, tap the plus sign (+).
      2. In the Connection Name text box, type: b) - VT Traffic over SSL VPN.
      3. In the URL text box, type: vpn.nis.vt.edu/vttraffic.
      4. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      5. Verify that Authentication Type is set to Password.
      6. Tap Add.
  4. Connect and enter your credentials.
      1. Under b) - VT Traffic over SSL VPN, tap Connect.
      2. In the Password text box, type your network password.
      3. Tap Sign In.
      4. Complete authentication with your 2-factor device
        (If your second factor device is unavailable or broken, see the How Do I Login without My Phone or Any 2-Factor Device if It Is Lost, Forgotten, Broken or Unavailable? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
        (If you have never enrolled in 2-factor authentication, you must do so before connecting to the VPN. For instructions, see Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.)
        • To use push notification:
          1. In the text box, type: push.
            (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, add a number to the end. For example, "push2" or "push3".)
          2. Tap Sign In.
          3. When the push notification appears, accept the Duo push notification. 
            (If the push notification does not appear, see the What Do I Do about Duo Mobile App Errors, Problems, Connection Issues, or Duo Push Not Received? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use SMS text message:
          1. In the text box, type: sms1.
            (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, add a number to the end. For example, "sms2" or "sms3".)
          2. Tap Sign In.
          3. You will see an error message saying: "Invalid secondary username or password. Please re-enter your user information." This is normal, because client must clear the Secondary password text box so that you can type a passcode. Tap  Close.
          4. You will receive an SMS text message that starts with "SMS passcodes:" to your primary mobile phone. Open that text message. The text message will contain 10 different passcodes that are each 6-digits long.
          5. Under a) - All Traffic over VPN, tap Connect.
          6. In the Network Pwd text box, type your network password.
          7. Tap Sign In.
          8. In the text box, type one of the passcodes from the SMS text message.
          9. Tap Sign In.
          10. If prompted about creating a VPN connection, tap OK.
          11. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a voice phone call:
          1. In the text box, type: phone.
            (This will call the first voice-capable device that is enrolled in your Duo account. To have a different device called, add a number to the end. For example, "phone2" or "phone3".)
          2. Tap Sign In.
          3. The primary telephone number associated with your Duo account will ring. Answer the telephone.
          4. Press one of the number keys on the phone to confirm the authentication.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from the Duo mobile app:
          1. Start the Duo mobile app.
          2. In the Duo mobile app, tap the key.
          3. In the text box, type the 6-digit numeric passcode.
          4. Tap Sign In.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from a D-100 token or a software token:
          1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
          2. In the text box, type the 6-digit numeric passcode.
          3. Tap Sign In.
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
  5. When you are finished using the remote access - VPN, disconnect from it. To do this:
    1. Open the Ivanti Secure Access Client app.
    2. Swipe the connection to Disconnect.

Top of page

Download and Install Ivanti Secure Access Client on iOS

  1. Download and install the Ivanti Secure Access Client app.
    1. In the Apple App Store, search for Ivanti Secure Access Client.
    2. In the search results, tap Ivanti Secure Access Client.
    3. If available, tap Get.
    4. Tap Install.
    5. If prompted, type your Apple password and tap OK.
  2. To start client, when the installation is complete, tap Open.

a) - All Traffic over SSL VPN on iOS

  1. Verify that you are registered to use the Remote Access VPN service by following the instructions at see Registering Online for eduroam Wireless LAN Service.
  2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.
  3. Open the Ivanti Secure Access Client application on your device.
  4. Add the connection.
    • If this is the first connection you are adding to client:
      1. In the Corporate email or URL text box, type: vpn.nis.vt.edu/alltraffic.
      2. Tap Submit.
      3. In the Connection Name text box, type: a) - All Traffic over SSL VPN.
      4. In the URL text box, type: vpn.nis.vt.edu/alltraffic.
      5. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      6. Verify that Authentication is set to Password.
      7. Tap Add.
    • If you have existing connections in client:
      1. On the Connections screen, in the top-right corner, tap the plus sign (+).
      2. In the Connection Name text box, type: a) - All Traffic over SSL VPN.
      3. In the URL text box, type: vpn.nis.vt.edu/alltraffic.
      4. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      5. Verify that Authentication is set to Password.
      6. Tap Add.
  5. Connect and enter your credentials.
      1. Under a) - All Traffic over SSL VPN, tap Connect.
      2. In the  Password text box, type your network password.
      3. Tap Sign In.
      4. Complete authentication with your 2-factor device
        (If your second factor device is unavailable or broken, see the How Do I Login without My Phone or Any 2-Factor Device if It Is Lost, Forgotten, Broken or Unavailable? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
        (If you have never enrolled in 2-factor authentication, you must do so before connecting to the VPN. For instructions, see Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.)
        • To use push notification:
          1. In the text box, type: push.
            (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, add a number to the end. For example, "push2" or "push3".)
          2. Tap Sign In.
          3. When the push notification appears, accept the Duo push notification. 
            (If the push notification does not appear, see the What Do I Do about Duo Mobile App Errors, Problems, Connection Issues, or Duo Push Not Received? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use SMS text message:
          1. In the text box, type: sms1
            (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, add a number to the end. For example, "sms2" or "sms3".)
          2. Tap Sign In.
          3. You will see an error message saying: "Invalid secondary username or password. Please re-enter your user information." This is normal, because client must clear the Secondary password text box so that you can type a passcode. Tap Close.
          4. You will receive an SMS text message that starts with "SMS passcodes:" to your primary mobile phone. Open that text message. The text message will contain 10 different passcodes that are each 6-digits long.
          5. Under a) - All Traffic over VPN, tap Connect.
          6. In the Network Pwd text box, type your network password.
          7. Tap Sign In.
          8. In the text box, type one of the passcodes from the SMS text message.
          9. Tap Sign In.
          10. If prompted about creating a VPN connection, tap OK.
          11. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a voice phone call:
          1. In the text box, type: phone.
            (This will call the first voice-capable device that is enrolled in your Duo account. To have a different device called, add a number to the end. For example, "phone2" or "phone3".)
          2. Tap Sign In.
          3. The primary telephone number associated with your Duo account will ring. Answer the telephone.
          4. Press one of the number keys on the phone to confirm the authentication.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from the Duo mobile app:
          1. Start the Duo mobile app.
          2. In the Duo mobile app, tap the key.
          3. In the text box, type the 6-digit numeric passcode.
          4. Tap Sign In.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from a D-100 token or a software token:
          1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
          2. In the text box, type the 6-digit numeric passcode.
          3. Tap Sign In.
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
  6. When you are finished using the remote access - VPN, disconnect from it. To do this:
    1. Open the Ivanti Secure Access Client app.
    2. Swipe the connection to Disconnect.

Top of page

b) - VT Traffic over SSL VPN on iOS

  1. Verify that you are registered to use the Remote Access VPN service by following the instructions at see Registering Online for eduroam Wireless LAN Service.
  2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.
  3. Open Ivanti Secure Access Client application on your device.
  4. Add the connection.
    • If this is the first connection you are adding to client:
      1. In the Corporate email or URL text box, type: vpn.nis.vt.edu/vttraffic.
      2. Tap Submit.
      3. In the Connection Name text box, type: b) - VT Traffic over SSL VPN.
      4. In the URL text box, type: vpn.nis.vt.edu/vttraffic.
      5. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      6. Verify that Authentication is set to Password.
      7. Tap Add.
    • If you have existing connections in client:
      1. On the Connections screen, in the top-right corner, tap the plus sign (+).
      2. In the Connection Name text box, type: b) - VT Traffic over SSL VPN.
      3. In the URL text box, type: vpn.nis.vt.edu/vttraffic.
      4. In the Username text box, type your VT Username, which is the first part of your @vt.edu email address.
      5. Verify that Authentication is set to Password.
      6. Tap Add.
  5. Connect and enter your credentials.
      1. Under b) - VT Traffic over SSL VPN, tap Connect.
      2. In the  text box, type Password your network password.
      3. Tap Sign In.
      4. Complete authentication with your 2-factor device
        (If your second factor device is unavailable or broken, see the How Do I Login without My Phone or Any 2-Factor Device if It Is Lost, Forgotten, Broken or Unavailable? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
        (If you have never enrolled in 2-factor authentication, you must do so before connecting to the VPN. For instructions, see Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.)
        • To use push notification:
          1. In the text box, type: push.
            (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, add a number to the end. For example, "push2" or "push3".)
          2. Tap Sign In.
          3. When the push notification appears, accept the Duo push notification. 
            (If the push notification does not appear, see the What Do I Do about Duo Mobile App Errors, Problems, Connection Issues, or Duo Push Not Received? section of Frequently Asked Questions about Duo 2-Factor Authentication.)
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use SMS text message:
          1. In the text box, type: sms1.
            (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, add a number to the end. For example, "sms2" or "sms3".)
          2. Tap Sign In.
          3. You will see an error message saying: "Invalid secondary username or password. Please re-enter your user information." This is normal, because client must clear the Secondary password text box so that you can type a passcode. Tap Close.
          4. You will receive an SMS text message that starts with "SMS passcodes:" to your primary mobile phone. Open that text message. The text message will contain 10 different passcodes that are each 6-digits long.
          5. Under a) - All Traffic over VPN, tap Connect.
          6. In the Network Pwd text box, type your network password.
          7. Tap Sign In.
          8. In the text box, type one of the passcodes from the SMS text message.
          9. Tap Sign In.
          10. If prompted about creating a VPN connection, tap OK.
          11. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a voice phone call:
          1. In the text box, type: phone.
            (This will call the first voice-capable device that is enrolled in your Duo account. To have a different device called, add a number to the end. For example, "phone2" or "phone3".)
          2. Tap Sign In.
          3. The primary telephone number associated with your Duo account will ring. Answer the telephone.
          4. Press one of the number keys on the phone to confirm the authentication.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from the Duo mobile app:
          1. Start the Duo mobile app.
          2. In the Duo mobile app, tap the key.
          3. In the text box, type the 6-digit numeric passcode.
          4. Tap Sign In.
          5. If prompted about creating a VPN connection, tap OK.
          6. When the connection is complete, the Connect button will change to the Disconnect button.
        • To use a 6-digit numeric passcode from a D-100 token or a software token:
          1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
          2. In the text box, type the 6-digit numeric passcode.
          3. Tap Sign In.
          4. If prompted about creating a VPN connection, tap OK.
          5. When the connection is complete, the Connect button will change to the Disconnect button.
  6. When you are finished using the remote access - VPN, disconnect from it. To do this:
    1. Open the Ivanti Secure Access Client app.
    2. Swipe the connection to Disconnect.

Top of page