Introduction
Both Harvard University and Harvard Medical School (HMS) use two-factor authentication (also known as two-step verification) to enhance the security. Both the University and HMS also use Duo Mobile, though different instances. Two-factor authentication is required at HMS to use the VPN (Virtual Private Network).
Note – If you need to reconnect or reactivate Duo Mobile after a mobile phone upgrade, see this information: https://harvardmed.service-now.com/kb_view.do?sysparm_article=KB0010832
Prerequisites
- A mobile phone, tablet, or phone number
- If using a mobile phone or tablet, the ability (e.g., you have the password) to install apps
- If using a mobile phone or tablet, cellular data or wi-fi access to the internet
Note – Prior approval of your VPN Request Form is not required to set up two-step authentication; however, two-factor may be of limited use without being approved for VPN access.
Steps
|
Step 1 From a computer, visit https://secure.med.harvard.edu with a web browser. Enter your eCommons ID and password to log in. |
|
|
Step 2 Read the introduction, if you wish, and click the button Start setup. Note – Although you may be prompted to use Flash, Flash is not needed for the setup process.
|
|
|
Step 3 Select the radio button for the type of device you will use for two-factor authentication. We recommend using a mobile phone. Note – The rest of these instructions show adding a Mobile phone, but the steps are similar for Tablet and Landline (though Landline does not involve installing apps, of course). If you wish to use a Security Key, please contact the Service Desk (617-432-2000 or itservicedesk@hms.harvard.edu) or visit them on the second floor of TMEC (Tosteson Medical Education Center) |
|
|
Step 4 Assuming you selected a Mobile phone (or Landline), enter your phone number in the text field. After entering the phone number, check the checkbox to confirm the number is correct, and click the button Continue. If the phone number has been used at Harvard Medical School before, you will be prompted to Verify Ownership of the number via a text (SMS) message or phone call. |
|
|
Step 5 Select the radio button for the type of phone (e.g., iPhone, Android). Then click the button Continue. |
|
|
Step 6 Follow the instructions to install the Duo Mobile app onto your mobile phone, if you do not already have it installed (e.g., from the Harvard Key two-step setup). If prompted, grant the app rights to send you notifications and access to your camera. Click the button I have Duo Mobile Installed when you are ready. |
|
|
Step 7 NOTE: Internet access is required to complete the next step. See instructions for connecting to the HMS Private wi-fi network if you do not have reliable cellular data service.
Open the Duo Mobile app. If prompted, grant the app access to your camera. Point the camera at the QR (Quick Response) Code for a few seconds, and Duo Mobile will automatically add Harvard Medical School as an option. If your phone's camera is broken, click the link Email me an activation link instead, open the email from your mobile phone, click the link, and you will be prompted to open the link with Duo Mobile. |
|
|
Step 8 Success! Click Add another device to add a second device just in case you drop your phone in the Charles River or somesuch. |