Using Duo 2-Factor with the NC State VPN

NC State University provides a Virtual Private Networking (VPN) Service to all of its students, staff, and faculty members.  The Office of Information Technology requires VPN users to authenticate with Duo Security when logging into the service.  When attempting to connect to the VPN, users will see a Second Password field that will allow them to use a variety of methods to authenticate through Duo.  

Using Duo 2-Factor to Authenticate your Login

Using Duo Push

1. Enter your Unity ID and password.
2. In the Second Password field, type 'push'.
3. Select OK.
4. You will receive a notification from the Duo app asking if you are attempting to sign in. 
5. Select Approve.

By Text Message

1. Enter your Unity ID and password.
2. In the Second Password field type 'sms'.
3. Select OK.
4. Your phone will be sent a passcode via text message. The initial login attempt will say that it failed.
5. Enter your Unity ID and password again.
6. In the Second Password field, type in the 7-digit code you received in the text message.
7. Select OK.

Using a Passcode from the Duo Mobile App

1. Enter your Unity ID and password.
2. Open the Duo Mobile app.
3. Select the section labeled Duo Protected - NC State University.
4. Enter the 6-digit code that appears on your phone into the Second Password field of the VPN client.
5. Select OK.

Using a Passcode from the Duo One-Time Passcode Tool

1. Go to go.ncsu.edu/dc and sign in with your Unity ID and password.
2. Use your Security Key/U2F Token.
3. Select the Generate New Passcode button.
4. Enter the 9-digit code that appears in the Second Password field of the VPN client.
5. Select OK.

Using a Passcode from the 2FA Bypass Code Tool

1. Visit go.ncsu.edu/2fabypass and sign in with your Unity ID and password.
2. Answer a security question.
3. Click Generate Duo Codes.
4. Enter one of the 9-digit codes that appear in the Second Password field of the VPN client.
5. Select OK.

It is important to note that U2F tokens and security keys will NOT work to authenticate into the VPN.  If you do not have one of the methods above set up, you will need to call the OIT Help Desk at 919-515-4357 to have a code generated for you.