Accessibility statement

Making IT more secure - VPN and SSH service (postponed)

Posted on 3 March 2020

This rollout has been postponed until further notice.

Updated on 10 March:

We’re postponing this until further notice. We’ve decided not to introduce this change at a time when large numbers of staff could be required to work from home at short notice due to the coronavirus (COVID-19) outbreak.

Those involved in piloting Duo two-factor authentication (IT Services and the Department of Biology) will continue to use it to log in to the VPN.

We still plan to roll out Duo two-factor authentication to everyone later this year, but it will not be enforced on 23 March for all students and staff as previously planned.

Original article:

As we announced in December 2019, we have been investigating two-factor authentication (2FA), an added layer of security which will help us to keep your information and our network more secure:

Following a successful pilot of Duo two-factor authentication within the Department of Biology and IT Services, we’re rolling out this protection to all members of the University across both the Virtual Private Network (VPN) and SSH services. This means that Duo 2FA will be required to log in to either of those services from Monday 23 March.

What you need to do

We recommend that all current and potential users of these services should register for Duo 2FA now in preparation for the change later in March.

It’s quick and easy to register - log in to the site using your University username and password, then follow the instructions:

More information on registering and using Duo can be found on our website:

If you have already registered for Duo 2FA (for example, if you were involved in the pilot phase) then you’re all set - there is no need to register again.

If you’re a member of staff and you do not wish to register a mobile device with Duo, please contact itsupport@york.ac.uk to discuss this. We can provide a free hardware token (a small key fob with a digital display) for you to use but, for security and ease of use, we strongly recommend using the Duo Mobile app.