Logging in to VDI with 2-Step Verification | Department of Information Technology

Cristopher Centers

Logging in to VDI (Virtual Desktop Infrastructure) with 2SV (2-Step Verification) Beginning August 17, 2020, all VDI users will be required to login using 2-Step Verification, known at Harvard as 2SV.  More information on 2SV can be found at the Harvard University Information Technology web site. 2SV is an extra […]

Logging in to VDI (Virtual Desktop Infrastructure) with 2SV (2-Step Verification)

Beginning August 17, 2020, all VDI users will be required to login using 2-Step Verification, known at Harvard as 2SV.  More information on 2SV can be found at the Harvard University Information Technology web site.

2SV is an extra layer of security designed to ensure that you are the only person who can use your Harvard account, even if your password is stolen. Logging in with 2SV requires something you know (username/password), and something you have (typically a smart phone).  This combination makes it very difficult for someone to hack your account even if your password is stolen.

2-Step Verification Options

There are several ways to use 2-Step Verification  with VDI. The method you use depends on how you have set your 2SV options with DUO at key.harvard.edu.

 

This method requires the DUO smart phone app.

These steps assume you already have the VMware Horizon Client software installed on your laptop, PC, or tablet.  If you don’t, please see https://www.hsph.harvard.edu/information-technology/frequently-asked-questions/vdi-faq/ to download the software.

  1. Launch VMware Horizon Client from your laptop, PC, or tablet.

Or click here to launch VDI

2. If this is your first time connecting to VDI, add the HSPH VDI server to your list of VDI servers.

    1. Click Add Server
    2. In the Connection Server field enter desktop.sph.harvard.edu
    3. Click Connect
  1. The first of 2 Login boxes appears. This is the DUO 2-Step Verification login.
    1. In the User Name field, type your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. In the Passcode field type “push”
    3. Click Login to push an authentication request to the DUO app on your smart phone.

4. Your smart phone will now have a Login Request similar the one shown below.
Tap to open the DUO app.

  1. APPROVE to continue the login process.
  2. The second Login box appears. This is where you will enter your HarvardKey password.
    1. In the User Name field, verify your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. In the Password field, type your HarvardKey Password.
    3. Click Login to finish logging in to the VDI server.

You’re in! The VDI launches on your laptop, PC, or tablet
(Note that there is no “Remember Me for 30 Days” option with 2SV on VDI.)

This method requires the DUO smart phone app.

These steps assume you already have the VMware Horizon Client software installed on your laptop, PC, or tablet.  If you don’t, please see https://www.hsph.harvard.edu/information-technology/frequently-asked-questions/vdi-faq/ to download the software.

  1. Launch VMware Horizon Client from your laptop, PC, or tablet.

Or click here to launch VDI

  1. If this is your first time connecting to VDI, add the HSPH VDI server to your list of VDI servers.
    1. Click Add Server
    2. In the Connection Server field enter desktop.sph.harvard.edu
    3. Click Connect
  1. The first of 2 Login boxes appears. This is the DUO 2-Step Verification login.
    1. In the User Name field, type your HarvardKey User Name.  (You may also use your NetID or “3+3”.)

b. In the Passcode field type the 6 digit code from the DUO app on your smart phone by doing the following:

      1. Open DUO on your smart phone
      2. Select your Harvard University DUO account and expand the account to show a 6 digit code.
      3. Type this 6 digit code into the Passcode field.

c. Click Login

  1. The second of 2 Login boxes appears. This is where you will enter your HarvardKey password.
    1. In the User Name field, verify your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. In the Password field, type your HarvardKey password.
    3. Click Login to finish logging in to the VDI server.

You’re in! The VDI launches on your laptop, PC, or tablet.
(Note that there is no “Remember Me for 30 Days” option with 2SV on VDI.)

These steps assume you already have the VMware Horizon Client software installed on your laptop, PC, or tablet.  If you don’t, please see https://www.hsph.harvard.edu/information-technology/frequently-asked-questions/vdi-faq/ to download the software.

  1. Launch VMware Horizon Client from your laptop, PC, or tablet.

Or click here to launch VDI

  1. If this is your first time connecting to VDI, add the HSPH VDI server to your list of VDI servers.
    1. Click Add Server
    2. In the Connection Server field enter desktop.sph.harvard.edu
    3. Click Connect
  1. The first of 2 Login boxes appears. This is the DUO 2-Step Verification login.
    1. In the User Name field, type your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. In the Passcode field type the word “phone”.
    3. Click Login

DUO will call the phone that you have set up in your DUO account to receive verification calls. This could be an office phone, mobile phone, home phone, etc.
d. Answer the call and press “1” on your phone keypad.

4. The second of 2 Login boxes appears. This is where you will enter your HarvardKey password.

    1. In the User Name field, verify your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. In the Password field, type your HarvardKey password.
    3. Click Login to finish logging in to the VDI server.

You’re in! The VDI launches on your laptop, PC, or tablet.
(Note that there is no “Remember Me for 30 Days” option with 2SV on VDI.)

These steps assume you already have the VMware Horizon Client software installed on your laptop, PC, or tablet.  If you don’t, please see https://www.hsph.harvard.edu/information-technology/frequently-asked-questions/vdi-faq/ to download the software.

  1. Launch VMware Horizon Client from your laptop, PC, or tablet.

Or click here to launch VDI

  1. If this is your first time connecting to VDI, add the HSPH VDI server to your list of VDI servers.
    1. Click Add Server
    2. In the Connection Server field enter desktop.sph.harvard.edu
    3. Click Connect
  1. The first of 2 Login boxes appears. This is the DUO 2-Step Verification login.
    1. In the User Name field, type your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. In the Passcode field type the letters “sms”.
    3. Click Login

d. DUO will send a text message to the smart phone that you have set up in your DUO account.

e. Open the message to see a list of 7 digit passcodes that you can use to log in to VDI, but will expire in 1 hour.

f. Text message speeds can vary.  While you were waiting for your text message, the VDI login box may have generated an Access Denied message.  If so, click OK.

g. Now type one of the 7 digit codes from your text in the Passcode field.

h. Click Login

4. The second of 2 Login boxes appears. This is where you will enter your HarvardKey password.

    1. In the User Name field, verify your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    2. n the Password field, type your HarvardKey password.
    3. Click Login to finish logging in to the VDI server.

You’re in! The VDI launches on your laptop, PC, or tablet.
(Note that there is no “Remember Me for 30 Days” option with 2SV on VDI.)

This method requires a hardware token such as a USB YubiKey. YubiKeys are available from the HSPH Field Support team at (617) 432-4357 or [email protected]
 

These steps assume you already have the VMware Horizon Client software installed on your laptop, PC, or tablet.  If you don’t, please see https://www.hsph.harvard.edu/information-technology/frequently-asked-questions/vdi-faq/ to download the software.

Launch VMware Horizon Client from your laptop, PC, or tablet.

Or click here to launch VDI

  1. If this is your first time connecting to VDI, add the HSPH VDI server to your list of VDI servers.
  1. Click Add Server
  2. In the Connection Server field enter desktop.sph.harvard.edu
  3. Click Connect

3. The first of 2Login boxes appears. This is the DUO 2-Step Verification login.

    1. Insert your YubiKey into your laptop or PC.
    2. In the User Name field, type your HarvardKey User Name. (You may also use your NetID or “3+3”.)
    3. Click your mouse in the Passcode field.

 

4. The second of 2 Login boxes appears. This is where you will enter your HarvardKey password.

        1. In the User Name field, verify your HarvardKey User Name. (You may also use your NetID or “3+3”.)
        2. n the Password field, type your HarvardKey password.
        3. Click Login to finish logging in to the VDI server.

You’re in! The VDI launches on your laptop, PC, or tablet.
(Note that there is no “Remember Me for 30 Days” option with 2SV on VDI.)

Next Post

Energy Industry PR Veteran Loretta Prencipe Joins Raffetto Herman Strategic Communications

Attorney and Former Journalist to Lead Expansion of the PR Firm’s Offerings in Energy and Sustainability Raffetto Herman Strategic Communications (RH Strategic) today announced that energy industry PR veteran Loretta Prencipe has joined the agency’s growing Washington, DC office. Prencipe, an attorney and former journalist who is well known for […]