This article is out of date.

Read current instructions for Windows VPN configuration and use.

Read current instructions for MacOS VPN configuration and use.

Update your VPN Configuration for Continued Service

At 10 am Tuesday, Nov. 6, 2018, ITS will upgrade the Mines Virtual Private Network (VPN) service for even greater security and reliability. (The upgrade should take no more than one hour, and perhaps much less.)

This means you will need to take a few minutes after the upgrade to download and configure your new VPN profile to keep your VPN connection running. DO NOT ATTEMPT TO UPGRADE YOUR VPN SETUP UNTIL AFTER TUESDAY MORNING, NOV. 6. At that point, here’s what you do:

IF YOU ARE NOW USING THE VISCOSITY VPN CLIENT FOR WINDOWS OR macOS

Most people at Mines use this recommended VPN configuration. To update, simply login at https://vpn.mines.edu using your Mines MultiPass credentials and download a new personal “user-locked profile,” saving the file to your local computer.

Now start your Viscosity VPN client. Delete your old Mines VPN profile by clicking the “minus” (-) at lower-left. Import your new user-locked profile by clicking the “plus” (+).

When you first connect to the Mines VPN you will be asked to enter your MultiPass credentials.


If you are also using Multi-Factor Authentication (MFA) to further protect your Mines accounts — and good for you if you are! — please see the instructions, below, for logging into https://vpn.mines.edu or the Mines VPN with MFA.

Or

IF YOU ARE NOW USING THE OPENVPN CLIENT FOR WINDOWS, macOS, LINUX, ANDROID, OR iOS

Many people at Mines use the OpenVPN client — especially users connecting via Linux, Android, or iOS devices. Here’s how to update your VPN connection there.

WINDOWS, macOS, LINUX, ANDROID, AND iOS INSTRUCTIONS

On the device in question, make sure your version of OpenVPN is fully updated via the usual App Store or software repository, if possible. (Those without administrative credentials on their computer may be unable to do so. Proceed to the next step.)

Login to https://vpn.mines.edu with your Mines MultiPass credentials and download your personal user-locked profile. Import your user-locked profile into your OpenVPN client in the usual way. Connect to the VPN and enter your Mines MultiPass credentials.

WINDOWS AND macOS ALTERNATE INSTRUCTIONS

For those with administrative rights to their Windows or macOS computer, another way to update your VPN client follows.

On the device in question, login to https://vpn.mines.edu with your Mines MultiPass credentials and download the OpenVPN client for Windows or macOS. Install the VPN client with your administrative account, replacing the older version. Your new user-locked profile is included as part of the download in this case.

Start your VPN connection and enter your Mines MultiPass credentials.


If you are also using Multi-Factor Authentication (MFA) to further protect your Mines accounts — and good for you if you are! — please see the instructions, below, for logging into https://vpn.mines.edu or the Mines VPN with MFA.

Visual guide: Using Multi-Factor Authentication (MFA) with the Mines VPN

Users of the Mines Multi-Factor Authentication (MFA) service — known as Duo — will need to further verify their identity when (1) logging into https://vpn.mines.edu to download a user-locked profile or other files or (2) when starting a VPN connection.


LOGIN TO VPN.MINES.EDU

In any web browser, navigate to https://vpn.mines.edu and enter your MultiPass credentials. Make sure the drop-down button says “Login” rather than “Connect,” which is not supported at Mines. Click “Go” to login.

VPN login screen

If you are enrolled with Duo (the Mines multi-factor authentication service), you will now be challenged to verify your identity. Type the word push into the available window and click “Continue” to send a push notification to your MFA device (usually your phone).

Approve the login on your second-factor device. Your login is now complete.


START A VPN CONNECTION WITH VISCOSITY

Open your Viscosity client and right-click on your VPN profile. Choose the “Connect” option.

Viscosity new-connection screen

Input your Mines MultiPass username and password. If you are enrolled with Duo (the Mines multi-factor authentication service), you will now be challenged to verify your identity. Type the word push into the available window and click “OK” to send a push notification to your MFA device (usually your phone).

Viscosity second-factor screen

Once you verify your identity via your second-factor device, you will be connected to the Mines VPN via Viscosity.


START A VPN CONNECTION WITH OPENVPN

Start your updated OpenVPN client, input your Mines MultiPass username and password, and connect. If you are enrolled with Duo (the Mines multi-factor authentication service), you will now be challenged to verify your identity. Type the word push into the available window and click “Continue” to send a push notification to your MFA device (usually your phone).

OpenVPN second-factor screen

Once you verify your identity via your second-factor device, you will be connected to the Mines VPN via OpenVPN.

 
START A VPN CONNECTION VIA THE LINUX COMMAND LINE

In a terminal shell, type the following command:

sudo openvpn --config <path>/client.ovpn

(Substitute the full path to the client.ovpn file in the command above.)

You will be asked for your local computer account’s administrative password to start your sudo session. Submit that correctly and you will then be asked to enter your Mines MultiPass username and password.

Enter Auth Username:
Enter Auth Password:

Submit your MultiPass credentials successfully and you will receive a Duo MFA challenge.

CHALLENGE: Duo passcode or second factor:

Type the word push into the terminal window and hit “Enter” to send a push notification to your MFA device (usually your phone).

Once you verify your identity via your second-factor device, you will be connected to the Mines VPN via OpenVPN. You will see a message like this one indicating a successful connection:

Wed Oct 24 14:11:23 2018 Initialization Sequence Completed

To end your VPN connection, press Ctrl-C in your terminal to end the session, as indicated by a message such as this:

Wed Oct 24 14:20:06 2018 SIGINT[hard,] received, process exiting

 

 

 

INSTALL VPN SOFTWARE ON YOUR COMPUTER FOR THE FIRST TIME

FACULTY AND STAFF: REQUEST ENROLLMENT IN “DUO” MULTI-FACTOR AUTHENTICATION

And, of course, if you need help with any of this, please contact the CCIT Technology Support Center at 303.384.2345 or submit a support request via the Mines Help Center.

 

KNOWN ISSUES

The “Import Connection > From Server” feature in the Viscosity VPN client is currently not working. This is a bug that has been referred to the vendor. Instead, download your personal user-locked profile from https://vpn.mines.edu and install it as described above.

 

Packages and repositories for older versions of Red Hat and CentOS Linux (particularly 6.x and earlier) do not support the updated VPN. Please submit a Mines Help Center support request to explore possible options if you must use CentOS 6.x or earlier on a device.