The RBVI VPN will be down
this Friday 10am-noon as we test two-factor-authentication (TFA).
If our tests are successful, another email will announce the
time-frame for implementing TFA on RBVI's VPN.
Background:
UCSF security standards require TFA when accessing UCSF computing
resources from outside of UCSF. Because the RBVI VPN currently
does not require TFA, we are not compliant with this standard. A recent audit of RBVI computing resources
identified this as a critical deficiency requiring high priority
resolution.
Our plan is to implement TFA on RBVI's VPN using the same Duo
technology as currently implemented when directly ssh'ing into
RBVI's host "plato" from outside of UCSF. Access to plato
requires use of the Duo "UCSF PharmChem" account. If you are
already using this account to access plato, then minimal/no
changes will be required to access our VPN in the future.
Please disconnect from the RBVI VPN prior to 10am on Friday,
otherwise you risk your connection being severed without warning
and potentially loosing any work in progress.