eToken Migration to UTORMFA

eTokens  no longer function on Weblogin. We strongly recommend that all eToken users start to use UTORMFA to authenticate. Sign up for UTORMFA today!  

During the eToken Migration Project, eToken authentication for high-security applications that used AdminVPN, including Administrative Management System (AMS), Repository of Student Information (ROSI), ROSI Files, Rocket Shuttle, StarRez and Unit VPNs, transitioned to UTORMFA. Most other eToken applications (i.e., those that don’t require AdminVPN) are also UTORMFA enabled.   

All eToken users should return their eTokens to their administrator. Your eToken administrator will then forward it through interoffice mail to Information Security for secure disposal. eToken administrators/departmental administrators are asked to send them to Peter St. Onge, Information Security, 4 Bancroft Ave.  

We no longer issue eTokens to new users and all new users will be on-boarded with UTORMFA.

Connecting to AdminVPN

Learn how to connect to the AdminVPN in this Quick Start Guide or read about the steps in the Enterprise Service Centre (ESC) article How to connect to the AdminVPN.

 

 

What is UTORMFA?  

UTORMFA, powered by DUO, is a software based multi-factor authentication (MFA) method that authenticates user logins via prompts sent to a user’s phone.    

By adopting UTORMFA, we provide a single and consistent MFA experience. This will also significantly reduce administrative overhead and financial costs. Users will find that UTORMFA is easy to use, quick to set up, convenient and secure. It is already in use across the tri-campus for weblogin authentication.   

Learn more about UTORMFA and make sure to sign up today.   

_______________________________________________________________________

Cisco AnyConnect Configuration Update

AdminVPN Applications (AMS, ROSI, ROSI Files, Rocket Shuttle, StarRez and Unit VPNs)  

In preparation for the migration from eToken to UTORMFA, local IT administrators will have deployed an updated Cisco AnyConnect AdminVPN profile to users’ computers. Users will see the current AdminVPN (port.eis.utoronto.ca) and the new AdminVPN (admin.vpn.utoronto.ca). The new admin.vpn.utoronto.ca has now been fully activated – please use this VPN going forward.

Learn more about AdminVPN in this article (KB0011156).  

IT Administrators: The deployment package has been developed by Information Security and can be used to roll out the configuration to your users. See how to install Cisco AnyConnect Secure Mobility Client (KB0011157).    

If you do not have a local IT administrator, and you are having issues following the instructions above, you can submit a ticket through Remote Access Help in the Enterprise Service Centre.    

If you are a Digital Workplace client, please refer to the notification sent on November 16. 

_______________________________________________________________________

eToken Digital Signing

If your department/Faculty is using eToken Digital Signing, please move to an alternative electronic signature solution  as soon as possible. No new eTokens will be issued after November 27, 2021, and new staff members will need to use an alternate solution for electronic signatures.  

_______________________________________________________________________

Remote Desktop Gateway (RDG)

The conversion for Remote Desktop Gateway (RDG) has not been announced and further information will be provided in the Remote Desktop Gateway article (KB0011164).  

_______________________________________________________________________

Key Project Dates

Aug. 29 and Sept. 12  AdminVPN migration testing successfully completed for Cisco AnyConnect. 
Nov. 3   All eToken users need to be signed up for UTORMFA. 
Nov. 8  All AdminVPN users have Cisco AnyConnect AdminVPN profile updated. Digital Workplace users will have profile updated on November 26. 
Nov. 23 at 10:00 a.m.  ROSI Express transitions from eToken to UTORMFA authentication (note: ROSI Express does not require Cisco AnyConnect). 
Nov. 27  admin.vpn.utoronto.ca is activated for all AdminVPN users and applications (including AMS, ROSI, ROSI Files, Rocket Shuttle, StarRez and Unit VPNs). 
Nov. 27   eTokens will no longer be issued and all users should be using UTORMFA to access the new AdminVPN. 
 Dec. 8  port.eis.utoronto.ca VPN will be deactivated and IT administrators will start removing the profile from the Cisco AnyConnect drop-down menu. 
Mar. 3 2022  eToken retirement for Weblogin. 

_______________________________________________________________________

Archival Recording of Connect + Learn Session

View a one-hour Connect+Learn session that explains the eToken Migration Project. 

This session provided: 

  • An overview of the eToken Migration Project. 
  • What processes are affected for those using high security systems (e.g., AMS, ROSI, ROSI Files, Rocket Shuttle and StarRez). 
  • How to login to high security systems after the migration. 
  • Where to find support. 

Resources 

_______________________________________________________________________

Support

If you require assistance, please contact your local IT administrator or your campus help desk: