eToken Migration to UTORMFA 

Information Security is pleased to announce that eToken authentication for high security applications will migrate to UTORMFA later this fall. This includes U of T’s Administrative Management System (AMS), ROSI, ROSI Files, ROSI Express, Rocket Shuttle and Unit VPNs. 

All applications using Cisco AnyConnect to access AdminVPN will be migrated on Saturday, November 27. After November 27, we will no longer issue eTokens to new users and they will be on-boarded with UTORMFA. 

After the migration, we strongly recommend you use UTORMFA to access AdminVPN, however, the eToken will continue to be supported for current users until its retirement in February 2022. Upon retirement, eTokens will no longer allow users to authenticate, and users will need to return them to their eToken administrator/departmental administrator when returning to campus. Please stay tuned for more details. 

What is UTORMFA? 

UTORMFA, powered by DUO, is a software based multi-factor authentication (MFA) method that authenticates user logins via prompts sent to a user’s phone.  

By adopting UTORMFA, we provide a single and consistent MFA experience. This will also significantly reduce administrative overhead and financial costs. Users will find that UTORMFA is easy to use, quick to set up, convenient and secure. It is already in use across the tri-campus for weblogin authentication. 

Learn more about UTORMFA and make sure to sign up today.  


Cisco AnyConnect Configuration Update   

AdminVPN Applications (AMS, ROSI, ROSI Files, ROSI Express, Rocket Shuttle, and Unit VPNs) 

In preparation for the eToken migration, your local IT administrator(s) will be deploying an updated Cisco AnyConnect AdminVPN profile to your computer before November 8. With this configuration change, you will see both the current AdminVPN ( and the new AdminVPN ( Please continue to use until November 27. Learn more about AdminVPN in this article (KB0011156). 

IT Administrators: The deployment package has been developed by Information Security and can be used to roll out the configuration to your users. See how to install Cisco AnyConnect Secure Mobility Client (KB0011157).   

If you do not have a local IT administrator, and you are having issues following the instructions above, you can submit a ticket through Remote Access Help in the Enterprise Service Centre.   


eToken Digital Signing 

If your department/Faculty is using eToken Digital Signing, please move to an alternative electronic signature solution by February 2022. No new eTokens will be issued after November 27, 2021, and new staff members will need to use an alternate solution for electronic signatures. 


Remote Desktop Gateway (RDG) 

The conversion for Remote Desktop Gateway (RDG) has not been announced and further information will be provided in the Remote Desktop Gateway article (KB0011164). 


Key Project Dates  

Aug. 29 and Sept. 12 AdminVPN migration testing successfully completed for Cisco AnyConnect.
Nov. 3  All eToken users need to be signed up for UTORMFA.
Nov. 8 All AdminVPN users have Cisco AnyConnect AdminVPN profile updated.
Nov. 27 is activated for all AdminVPN users and applications (including AMS, ROSI, ROSI Files, ROSI Express, Rocket Shuttle, StarRez and Unit VPNs).
Nov. 27  eTokens will no longer be issued and all users should be using UTORMFA to access the new AdminVPN.
 Dec. 8 VPN will be deactivated and IT administrators will start removing the profile from the Cisco AnyConnect drop-down menu.
Feb. 2022  eToken retirement.


Connect+Learn Sessions

eToken Project Info Session

Join us for a one-hour Connect+Learn session to find out more about the eToken Migration project:

Wednesday, October 20 from 1:00 pm to 2:00 pm 
Join Microsoft Teams Meeting
tel: +1 647-794-1609,,873627909#
Download to Calendar 

Each session provides:   

  • An overview of the eToken Migration Project. 
  • What processes are affected for those using high security systems (e.g., AMS, ROSI, ROSI Files, Rocket Shuttle and StarRez). 
  • How to login to high security systems after the migration. 
  • Where to find support.  


Electronic Signatures and Enterprise DocuSign Info Session

With fewer people in the office or meeting face to face, obtaining wet signatures on documents has become increasingly complicated, but navigating digital options can be overwhelming and confusing. So, last year an ITS working group was established to research and help demystify electronic signatures for U of T. 

Join us for an upcoming Connect+Learn session to find out more:  

Wednesday, October 20 from 2:00 pm to 2:30 pm 
Join Microsoft Teams Meeting
tel: +1 647-794-1609,,427953488#
Download to Calendar 

This session will address the following: 

  • What is an electronic signature? 
  • When do you need to use an electronic signature? 
  • How is an electronic signature different from a digital signature? 

This session will tackle those questions and introduce the recently launched eSignature Competency Centre, a resource portal providing information and guidance on electronic signatures. We’ll also showcase the Enterprise DocuSign service, a secure and robust solution for completing contracts, approvals and agreements in minutes rather than days. 


Archival Recording of Connect + Learn Session

View a one-hour Connect+Learn session that explains the eToken Migration Project. 

This session provided: 

  • An overview of the eToken Migration Project. 
  • What processes are affected for those using high security systems (e.g., AMS, ROSI, ROSI Files, Rocket Shuttle and StarRez). 
  • How to login to high security systems after the migration. 
  • Where to find support.