FDU-Secure uses current encryption standards to connect to the FDU wireless network via secure wireless traffic. This is an evolving technology and occasionally, one of the changes made by FDU IT requires us to issue a new certificate. When this occurs, you will need to accept the certificate using the process below.

How to Accept the New Certificate for FDU-Secure Wireless

1. Login to your Windows 10 computer
2. Go to the bottom right taskbar > Click on the “Networks” icon:
   • From the Networks list, select: “FDU-Secure“
   • Click “Connect“
3. At the “Continue connection?” prompt, click “Connect“

4. Open your browser and test your Internet connection

1. Login to your Mac computer
2. Go to top right menu bar > Click “Wi-Fi” icon:
   • From the Wi-Fi list, select: “FDU-Secure“
   • Click “Join“
3. At the “Authenticating to network FDU-Secure” prompt, click “Continue“

4. Click “OK“
5. Open your browser and test your Internet connection

1. Login your iOS device (eg. iPhone)
2. Go to your device’s Settings App > Select “Wi-Fi” > Select “FDU-Secure” > Click “Forget This Network“
3. Tap the “Back” button and select “Wi-Fi “once again to reload the available Wi-Fi networks:
   • From the Wi-Fi list, select: “FDU-Secure“
   • Enter your complete FDU NetID as in the examples below: “username@fdu.edu, username@student.fdu.edu, username@alumni.fdu.edu”
   • Enter your FDU NetID Password
   • Click Join

4. At the “Certificate” prompt, tap “Trust“

5. Open your browser and test your Internet connection

1. Login to your Android Device
2. Open the “Settings” Application > Select “Wi-Fi” > Select the Gear icon next to FDU-Secure

3. Select “Forget This Network“

4. Select FDU-Secure from the Wi-Fi menu

5. Select “EAP method” and select “PEAP” from the dropdown menu
6. Enter your complete FDU NetID and password
7. In the “CA Certificate” field, select “Use System Certificates”
8. In the Domain field, enter fdu.edu
9. Enable “Auto Reconnect“
10. Tap “Connect”

11. Open your browser and test your Internet connection

Two-factor Authentication

Two-factor authentication also referred to as multi-factor authentication, provides an additional layer of security when logging in to a website. Two-factor authentication is becoming the standard in cybersecurity. Google, Apple, and other services all have their two-factor authentication methods. In short, passwords are no longer sufficient in protecting our sensitive data; we’ve got to add another layer of security to our accounts.

Common FAQ’s for Duo Authentication

Duo Two-Factor Authentication

DUO two-factor authentication adds a second layer of security to your FDU NetID. It requires two factors to verify identity. These factors include something you know – your FDU NetID and password, and something you have – a phone or passcode, to authenticate and gain access to your account on FDU services. Passwords alone no longer provide adequate protection against cyber hacking. DUO is required for all current FDU students. Please follow the steps below.

Install Duo Mobile App

The DUO app is available for mobile phones and iPads. You can directly access the Duo Mobile Security App at the links below.

Activate your DUO Account

NOTE: This step requires a Desktop or Laptop browser.

1. In a Desktop or Laptop browser visit the DUO Management Portal to begin the activation process by enrolling your device. Activation requires scanning a QR code with the Duo app’s built-in scanner

2. Duo prompts you to enroll the first time you visit the DUO Management Portal using a browser or a client application that shows the interactive Duo web-based prompt

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of Duo’s authentication devices (for example, Security Keys won’t work with Internet Explorer). For the widest compatibility with Duo’s authentication methods, we recommend recent versions of Chrome and Firefox.

3. Click “Start setup” to begin enrolling your device

4. Select the type of device you’d like to enroll and click “Continue“. We recommend using a smartphone for the best experience, but you can also enroll iOS/Android tablets

5. Select your country from the drop-down list and type your phone number. Use the number of your smartphone or cell phone that you installed the Duo Mobile Security App on in the Step 1

6. Double-check that you entered it correctly, check the box, and click “Continue“

NOTE: If you’re enrolling a tablet you aren’t prompted to enter a phone number.

7. Choose your device’s operating system and click “Continue“.

8. Click “I have Duo Mobile installed”

• If you have not completed installing the Duo Mobile App in Step 1 please complete now by following the platform-specific instructions on the screen. After installing the app return to the enrollment window

9. Activating the app links it to your account so you can use it for authentication

10. On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app’s built-in barcode scanner. Follow the platform specific instructions for your device:

11. The “Continue” button is clickable after you scan the barcode successfully

• Can’t scan the barcode? Click “Or, have an activation link emailed to you instead” and follow the instructions

12. Once activated click “Continue” to complete registration

Configure Device Options (Optional)

1. You can use Device Options to give your phone a more descriptive name, or you can click “Add another device” to start the enrollment process again and add a second phone or another authenticator

• If this is the device you’ll use most often with Duo then you may want to enable automatic push requests by changing the “When I log in:” option and changing the setting from “Ask me to choose an authentication method” to “Automatically send this device a Duo Push” and click “Save“. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone.

2. Your device is ready to approve Duo push authentication requests. Click “Send me a Push” to give it a try. All you need to do is tap “Approve” on the Duo login request received at your phone

With DUO activated on your account, and with your device enrolled, you are ready to use DUO. When logging in, you will have two authentication options. Review the options below to determine what works best for you.

TIPS: We recommend the push notification to your smartphone, it’s the easiest. You can also check the box “Remember Me for 60 Days” to only perform the authentication once every two months on that device.

Authentication Options

There are four ways you can use DUO:

If you do not have your device with you, don’t worry. You can contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for a temporary passcode. These passcodes can be entered in the DUO prompt on your computer.

How Do I Change Settings or Enroll Another Device?

To change settings or enroll another device, visit DUO Management Portal or any DUO-supported application. When you get to the DUO prompt, click the “Settings” button and choose to add a new device or access your settings.

Duo Two-Factor Authentication

DUO two-factor authentication adds a second layer of security to your FDU NetID. It requires two factors to verify identity. These factors include something you know – your FDU NetID and password, and something you have – a phone or passcode, to authenticate and gain access to your account on FDU services. Passwords alone no longer provide adequate protection against cyber hacking. DUO is required for all current FDU students. Please follow the steps below.

Install Duo Mobile App

The DUO app is available for mobile phones and iPads. You can directly access the Duo Mobile Security App at the links below.

1. In a Desktop or Laptop browser visit the DUO Management Portal to begin the activation process by enrolling your device. Activation requires scanning a QR code with the Duo app’s built-in scanner

2. Duo prompts you to enroll the first time you visit the DUO Management Portal using a browser or a client application that shows the interactive Duo web-based prompt

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of Duo’s authentication devices (for example, Security Keys won’t work with Internet Explorer). For the widest compatibility with Duo’s authentication methods, we recommend recent versions of Chrome and Firefox.

3. Click “Start setup” to begin enrolling your device

4. Select the type of device you’d like to enroll and click “Continue“. We recommend using a smartphone for the best experience, but you can also enroll iOS/Android tablets

5. Select your country from the drop-down list and type your phone number. Use the number of your smartphone or cell phone that you installed the Duo Mobile Security App on in the Step 1

6. Double-check that you entered it correctly, check the box, and click “Continue“

NOTE: If you’re enrolling a tablet you aren’t prompted to enter a phone number.

7. Choose your device’s operating system and click “Continue“.

8. Click “I have Duo Mobile installed”

• If you have not completed installing the Duo Mobile App in Step 1 please complete now by following the platform-specific instructions on the screen. After installing the app return to the enrollment window

9. Activating the app links it to your account so you can use it for authentication

10. On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app’s built-in barcode scanner. Follow the platform specific instructions for your device:

11. The “Continue” button is clickable after you scan the barcode successfully

• Can’t scan the barcode? Click “Or, have an activation link emailed to you instead” and follow the instructions

12. Once activated click “Continue” to complete registration

1. You can use Device Options to give your phone a more descriptive name, or you can click “Add another device” to start the enrollment process again and add a second phone or another authenticator

• If this is the device you’ll use most often with Duo then you may want to enable automatic push requests by changing the “When I log in:” option and changing the setting from “Ask me to choose an authentication method” to “Automatically send this device a Duo Push” and click “Save“. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone.

2. Your device is ready to approve Duo push authentication requests. Click “Send me a Push” to give it a try. All you need to do is tap “Approve” on the Duo login request received at your phone

With DUO activated on your account, and with your device enrolled, you are ready to use DUO. When logging in, you will have two authentication options. Review the options below to determine what works best for you.

TIPS: We recommend the push notification to your smartphone, it’s the easiest. You can also check the box “Remember Me for 60 Days” to only perform the authentication once every two months on that device.

There are two ways you can use DUO:

Push Notification

Once the DUO mobile app is installed, you can select to receive a DUO notification on your smartphone. Open the notification, and you’ll see a green checkmark, and a red X. Simply tap the “Green Checkmark” to gain access.

Passcodes

You can use the DUO mobile app to generate passcodes. This option does not require wifi or data, so this is a great option if you’re traveling or if you have limited or no cell/internet service. Open your DUO mobile app, tap the FDU logo and it will reveal a passcode. During login, choose the enter a passcode option, enter the code and you’re in.

If you do not have your device with you, don’t worry. You can contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for a temporary passcode. These passcodes can be entered in the DUO prompt on your computer.

To change settings or enroll another device, visit DUO Management Portal or any DUO-supported application. When you get to the DUO prompt, click the “Settings” button and choose to add a new device or access your settings.

When using FDU Owned equipment, FDU-Secure should be your default method for connecting to the on-campus wireless network. FDU-Secure uses current encryption standards to connect to the FDU wireless network via secure wireless traffic. Although it requires a modicum of configuration upon initial setup, your device will automatically reconnect going forward.

Configuration Procedures

Start your laptop computer

Click on the Wi-Fi bar located at the right hand side of the taskbar

Click Network Settings > Wi-Fi > Network and Sharing Center

Select: Set up a new connection or network

• Choose a connection option: Manually connect to a wireless network
• Network name: FDU-Secure
• Security type: WPA2-Enterprise
• Encryption type: AES
• Security Key: [BLANK]

Check Start this connection automatically

• Check Start this connection automatically
  • Click Next

Click Change connection settings

Go to Security tab > Click Settings

• Check Verify the server’s identity by validating the certificate
  • Check Connect to these servers: radius.fdu.edu
  • Trusted Root Certification Authorities: AddTrust External CA Root
  • Notifications before connecting: Tell user if the server’s identity can’t be verified
  • Select Authentication Method: Secured password (EAP-MSCHAP v2)
  • Check: Enable Fast Reconnect

Configure Windows Login Name and Password.

• Click Configure

• Check automatically use my Windows logon name and password (and domain if any).

• Click OK.

Apply settings below, by clicking OK.

Click: Advanced settings

• Go to 802.1X settings tab

• Check Specify authentication mode: User or computer authentication

OK > OK > Close

FDU-Secure uses current encryption standards to connect to the FDU wireless network via secure wireless traffic. As a result, FDU-Secure is the preferred method of accessing the on-campus Wireless network.

Configuration Procedures

Start your laptop computer

Click on the Wi-Fi bar located at the right hand side of the taskbar

Click Network Settings > Wi-Fi > Network and Sharing Center

Select: Set up a new connection or network

• Choose a connection option: Manually connect to a wireless network
  • Network name: FDU-Secure
  • Security type: WPA2-Enterprise
  • Encryption type: AES
  • Security Key: [BLANK]
  • Check Start this connection automatically
  • Click Next

Click Change connection settings

Go to Security tab > Click Settings

• Check Verify the server’s identity by validating the certificate
  • Check Connect to these servers: radius.fdu.edu
  • Trusted Root Certification Authorities: AddTrust External CA Root
  • Notifications before connecting: Tell user if the server’s identity can’t be verified
  • Select Authentication Method: Secured password (EAP-MSCHAP v2)
  • Check: Enable Fast Reconnect

Configure Windows Login Name and Password.

• Click Configure

• Uncheck Automatically use my Windows logon name and password (and domain if any).

• Click OK.

Apply settings below, by clicking OK

Click: Advanced settings

• Go to 802.1X settings tab

• Check Specify authentication mode: User or computer authentication

• OK > OK > Close

When prompted for credentials, enter your FDU NetId info: Examples: “username@fdu.edu or username@student.fdu.edu”

Introduction

This document outlines the university approved process for securely deleting Personal Information (PI) and Protected Health Information (PHI) after the PI or PHI has been encrypted.

Prerequisite

Eraser Portable® Secure Data Remove software needs to be installed on your computer. Please contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) to request the installation of this software. A member of USAN will assist with the installation and setup of the software.

Document Deletion Process

To securely delete an unencrypted version of a document that contain PI and/or PHI that has been encrypted, complete the following steps:

1. Find the “Secure Deletion” shortcut folder on your computer desktop screen
2. Cut and paste the unencrypted version of the file to be deleted into this folder
3. Find the “Eraser Portable” shortcut folder on your computer desktop screen and click to open the folder
4. Double Click on “EraserPortable.exe“. The screen below will appear
5. Click on the Green Run arrow to erase the file securely

6. A dialogue box will appear

7. Click “Yes“
8. When the deletion process completes, you will see a report appear

9. You may check your “Secure Deletion” folder to see if all documents have been erased

Outlook E-mail Deletion Process

To securely remove emails which contain PI and PHI from your Outlook client, complete the following steps:

1. Delete the email from your Inbox and/or Sent items folder
2. Delete the email from your Deleted Items
3. Go to “Recover Deleted Items“
4. Highlight Deleted Items Folder

5. Then go to Folder > Recover Deleted Items

6. Highlight email which requires permanent deleting and select “Purge Selected Items” and then click “OK“. Now message is permanently out of your email system

7. Finally, click “OK” on the following screen

This document outlines the University approved process for securely encrypting Personally Identifiable Information (PII).

Prerequisite

7Zip software needs to be installed on the end user’s computer. Please contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) to request the installation of this software. If justification is needed, notify UTAC that 7Zip is needed to encrypt documents containing PII.

Process

Encrypting Files and Folders

To encrypt a single file, find the file in your directory (or where you have it saved).

1. Right click on the document (do not open the document)
2. On the drop down menu, Find 7zip
3. Click “Add to archive…“
4. When 7zip opens, there are three (3) settings which need to be changed:
   • Archive Format = Select zip from drop down
   • Encryption Method = select AES-256 from drop down
   • Check “show password” and type in a password that the user creates
   • Click “OK“
   • A 7Zip Archive with the encrypted document will now appear in your directory

NOTE: Do not utilize any password that you use to access internal systems. The password cannot be recovered if forgotten.

Editing Encrypted Files and Folders

When editing an encrypted file or folder, you must make sure that you leave the 7zip archive open. If you close the archive, you will be able to work on the document, but it will not save.

Opening an Encrypted File or Folder

To open an encrypted file or folder:

1. Right click on the 7Zip archive
2. On the drop down menu, find 7Zip
3. Click on the first “Open archive”
4. Click to open your document

Saving an Encrypted File or Folder

To save an encrypted file or folder:

1. Save the document as normal
2. Upon closing document, the 7Zip archive will prompt the user to save the changes

FDU’s VPN Client Software, is also known as the “Cisco AnyConnect Secure Mobility Client”.

1. Use any web browser (Google Chrome, Mozilla Firefox, Safari) to navigate to vpn.fdu.edu. Please refrain from using the Internet Explorer web browser when installing the FDU VPN Client

2. Select your role within the University from the Group pulldown menu and enter your NetID Information in the username and password fields (user@fdu.edu)

3. On the left-hand side menu, click on “AnyConnect“, then click on “Start AnyConnect”

4. Download the VPN applet by clicking on “Download for Windows” or “Download for macOS” depending on your operating system. The browser will then download the VPN software client. When finished downloading, click on the file and select “open” within your browser

Chrome

Firefox

Safari

The browser will open a new window asking for permission to download the applet, click on “Allow”. When finished downloading, double click on the file to open the installation package and start the installation process.

5. Follow the steps prompted to accept all changes and grant requested permissions to install FDU VPN software. Note, Java Runtime Environment software may also need to be installed. A copy of the software download will be prompted to be installed or can be accessed at java.com/en/download/

6. The installation will continue, and an icon for the “Cisco AnyConnect Secure Mobility Client” with a “lock” icon will appear in your system tray once the installation is complete

1. Log into your computer

2. Launch the Cisco AnyConnect Secure Mobility Client from the Start Menu. Ensure the address “vpn.fdu.edu” is entered into the corresponding text box and then press the “Connect” button

3. Select your correct Group name on the dropdown menu, then enter your FDU NetID username and current FDU NetID password in the corresponding boxes. Click “OK“

4. Ensure a successful connection was made by checking on your system tray at the bottom right portion of your screen, or if on macOS, the client application window will display a screen check over the lock icon

The following instructions are the same for both Windows and macOS users.

1. Register with Duo MFA

• If you are an existing Duo user, please skip to Step 2
• For new Duo users, please follow the guide below for registering your DUO Account

2. Launch the “Cisco AnyConnect Secure Mobility Client” from the Start Menu or your Mac’s application folder if on macOS

3. Ensure the address “vpn.fdu.edu” is entered into the corresponding text box and then click the “Connect” button

4. Select your correct Group name on the dropdown menu

5. Enter your FDU NetID username and current FDU NetID password in the corresponding boxes. Click “OK”

6. In response, you’ll receive the Duo challenge dialog box. To use the preferred method type push in the Answer: dialog box, then click “Continue“

7. Tap “Approve” on the Duo login request received at your phone

8. Ensure a successful connection was made by checking on your system tray at the bottom right portion of your screen, or if on macOS, the client application window will display a screen check over the lock icon

Additional DUO Information

Users with multiple registered Duo devices will need to enter push1 for their primary device or push2 for their backup device. If you are unsure which device is your primary or secondary device, open the Duo Mobile app on your mobile device, click Fairleigh Dickinson University and enter the passcode displayed.

Additional DUO Authentication Options

Additional Resources for Cisco DUO