DUO Installation Instructions

You will have received an enrollment email from no-reply@duosecurity.com with the subject “Duo Security Enrollment”. Click the link in the email to start the DUO installation process.

If you have not received the DUO enrollment email or deleted it in error, please email helpdesk@ltu.edu for assistance.

To download the DUO installation instructions please click here.

DUO Device Management

For instructions on DUO Device Management please click here.

DUO Two-Factor Authentication Faculty/Staff and Students Accessing Team Shares Only

In our efforts to provide continuing cyber security improvements, LTU has implemented two-factor authentication (2FA) on several different systems for faculty and staff for LTU resources using a service called DUO. DUO is now required for two-factor authentication on many of our proprietary and business critical applications, including VPN, Banner Forms, Argos, Linux machines, connecting to network/share drives, and the list may grow. For information regarding 2FA authentication, please see the following website: https://duo.com/product/trusted-users/two-factor-authentication.

For off-campus use of systems and software requiring 2FA, you will need to connect to the VPN client Global Protect first.

Windows 10 Connection Directions

  1. Ensure you have added a device as found within the installation directions above.
  2. Navigate to Global Protect on your LTU laptop.
  3. Login using your campus login username and password.
  4. Select the vpn.ltu.edu portal
  5. Enter your campus login username and password.
  6. You should now be connected to the VPN tunnel.

For your personal laptop, please follow the steps below:

  1. Open your internet browser and navigate to vpn.ltu.edu
  2. Login using your campus login username and password.
  3. Select the correct VPN client for your computer, it will then automatically download.
  4. Navigate to your downloads folder and double-click the installation file, the program will then install.
  5. Navigate to the Windows icon on the lower left side of your screen, search for "GlobalProtect". Open the program and enter the vpn.ltu.edu under the portal.
  6. Sign in with your campus login username and password.
  7. You should now be connected to the VPN tunnel.
Mac Connection Directions 
Note: If client not installed, skip down to "For personal mac laptop" instructions.
- Click the globe icon in the system menu in the top right of the screen

2019-04-12 02.06.06 pm.png

- Within the Global Protect window that appears, Enter vpn.ltu.edu for the portal address and click Connect

2019-04-12 02.02.44 pm.png

- Enter your campus username and password credentials and click Sign In

2019-04-12 02.03.09 pm.png

- After clicking sign in, you should receive a DUO prompt on the device you previously registered with DUO. Accept the prompt to complete the connection.

- Once you have accepted the DUO prompt, the GlobalProtect window on your computer will show connected.

2019-04-12 02.03.38 pm.png
For personal mac laptop, please follow the steps below:

- Open your internet browser and navigate to https://vpn.ltu.edu

- Login using your campus login ID and password
2019-04-12 02.07.49 pm.png

- Select the Mac 32/64 bit GlobalProtect agent link to automatically download the file

2019-04-12 02.08.07 pm.png
- Navigate to your downloads folder/location and double-click the GlobalProtect installation file
2019-04-12 04.10.28 pm.png

- Follow the prompts for install. At some point during the install, you will need to allow  Palo Alto to load. This may be indicated with a message indicting the System extension was blocked.

2019-04-12 03.50.38 pm.png

If it does not automatically open this system preferences window, you need to open it manually. This is done by clicking the apple icon in the top left corner of the screen. Click System Preferences, Security & Privacy. In the lower portion of the screen, you will see an allow button to be clicked in order to load the Palo Alto software. This only needs to be done once during install.

2019-04-12 03.51.02 pm.png

Once installed, click the globe icon in the system menu in the top right of the screen.

Within the Global Protect window that appears, Enter vpn.ltu.edu for the portal address and click Connect.

Enter your campus username and password credentials and click Sign In.

Duo FAQs

What is Duo and how does it work?
Duo is a two-factor authentication provider that helps to secure access to applications. After entering your regular LTU username and password a second layer of security takes place where you are asked to prove your identity with a pre-registered Duo device such as a smartphone.

What is two-factor authentication (2FA)?
Two-factor authentication means logging in with something you know (your password) and something you have (your phone or other device). Through this combination an attacker would need to possess both parts to successfully compromise your account.

Do I have to enroll in Duo?
Yes, for faculty and staff to access certain LTU services such as Banner 9, ImageNow, VPN, etc. Duo authentication will be required.

I am a student, do I need to use Duo?
In most cases you do not. You will be able to continue to use the VPN without Duo to access the licensing servers and shared drives. However, if you are a student worker that accesses Duo protected applications such as Banner 9 or ImageNow, you will need to use Duo.

Is Duo usage tied to my computer or my phone?
No, Duo helps to secure LTU applications accessed from any supported device.

How does Duo work with my phone?
Duo can use a phone as a second factor of authentication, either through the Duo Mobile smartphone app, or by receiving SMS text messages or phone calls. The smartphone app is recommended for ease of use, as it only requires tapping to accept or deny the login.

Does Duo make any changes to my smartphone or allow LTU to control other information on
my phone?
No, installing Duo Mobile only serves to provide a second layer of authentication for LTU services. Permissions used by the application are limited to those required for this purpose and to ensure that the device is not already compromised.

Do I need to use a smartphone with Duo?
The Duo Mobile app on smartphone is the recommended method if possible since it is more flexible and easier to use to authenticate. But if you don’t have a smartphone or have one that does not support the app then login codes can be received by SMS text messages to any cell phone, or calls can be received to cell or landline phones.

What if I don’t have a screen lock or passcode on my phone?
In order to add a device to support Duo logins, you will need to first setup a screen lock, passcode, or biometric security on your phone before authenticating to LTU services.

What if I do not have cell reception or am in an area with only roaming data?
In the Duo Mobile app there is a key icon next to the LTU profile that will generate a six digit passcode which can be used to authenticate with Duo. If you do not have a smartphone and will be travelling outside of cell service, please contact the LTU Help Desk to discuss options.

Why is LTU using Duo?
Due to the global prevalence of security breaches in recent years, Duo is being used as an additional measure to protect LTU services. Adding a second factor of authentication for logins greatly improves security. It would be much more difficult for a hacker to both know your password and have possession of your phone or other device.

What devices can I use with Duo?
Duo supports authentication through Android and IOS smartphones and tablets, feature phones (non-smart) by SMS text messages or calls, landlines by calls, and physical authentication tokens. The Duo Mobile app on smartphones and tablets is the easiest, quickest, and most flexible method to use and is therefore recommended. The other options are more difficult requiring manual generation and entry of a changing passcode, and also incur additional costs to the University upon each authentication.