November 27: UTORMFA to replace eTokens for high security applications

An illustration showing an eToken with an arrow moving towards a DUO login screen

Information Security is pleased to announce that eToken authentication for high security applications that use AdminVPN, including AMS, ROSI, ROSI Files, Rocket Shuttle, StarRez and Unit VPNs, will migrate to UTORMFA on November 27 between 1:45 p.m. and 4:00 p.m.

As part of this transition, these applications will be unavailable on Saturday, November 27 from 1:45 pm to 4:00 pm.

Access to student information via ROSI Express will be uninterrupted over the weekend of November 27.

Key project details:

Cisco AnyConnect Configuration Update

In preparation for the migration on Saturday, November 27, local IT administrators will have deployed an updated Cisco AnyConnect AdminVPN profile to users’ computers. After the deployment, users will see the current AdminVPN (port.eis.utoronto.ca) and the new AdminVPN (admin.vpn.utoronto.ca). This new admin.vpn.utoronto.ca will be fully activated on Saturday, November 27 after 4:00 p.m. – please continue to use port.eis.utoronto.ca until this date. 

Migration Details

After November 27, eTokens will no longer be issued to new users. These users will need to be on-boarded with UTORMFA instead. While some applications may continue to accept eToken, we highly recommend that users switch to UTORMFA as soon their application is supported. Please keep your eToken and return it to your eToken administrator starting in January/February 2022. Your eToken administrator will then forward it through interoffice mail to Information Security for secure disposal.

Digital Signing

Anyone using eToken Digital Signing will have to move to an alternative electronic signature solution before February 2022. No new eTokens will be issued after November 27, 2021, and new staff members will need to use an alternate solution for electronic signatures.

Project Dates

Aug. 29 and Sept. 12 AdminVPN migration testing successfully completed for Cisco AnyConnect.
Nov. 3  All eToken users need to be signed up for UTORMFA.
Nov. 8 All AdminVPN users have Cisco AnyConnect AdminVPN profile updated. Digital Workplace users will have profile updated on November 26.
Nov. 23 at 10:00 a.m. ROSI Express transitions from eToken to UTORMFA authentication (note: ROSI Express does not require Cisco AnyConnect).
Nov. 27

after 4:00 p.m.

admin.vpn.utoronto.ca is activated for all AdminVPN users and applications (including AMS, ROSI, ROSI Files, Rocket Shuttle, StarRez and Unit VPNs).
Nov. 27  eTokens will no longer be issued and all users should be using UTORMFA to access the new AdminVPN.
 Dec. 8 port.eis.utoronto.ca VPN will be deactivated and IT administrators will start removing the profile from the Cisco AnyConnect drop-down menu.
Jan./Feb. 2022 eToken retirement. eToken administrators will collect eTokens to be sent to Information Security for secure disposal.

 

Learn more about the eToken Migration Project.

Make sure to sign up for UTORMFA today!

If you require assistance, please contact your local IT administrator or your campus help desk: