Thursday, November 17, 2016
Access to major systems at the University of Georgia will soon require the use of ArchPass Duo, UGA’s two-factor authentication tool, according to vice president of information technology Timothy M. Chester.
“Two-factor authentication is something that I envision rolling out for all systems for all students and employees in the next 18 months,” Chester said during his annual State of Technology address at the Richard B. Russell Special Collections Library November 16.
Two-factor authentication was initially implemented at UGA in 2013 to protect University systems holding sensitive and restricted data.
Two-factor authentication requires “something you know,” such as a password and “something you have,” such as a physical device to access specified systems. This process requires users to verify their identities by providing both a password and a physical device.
At UGA, the “something you have” is a mobile device, tablet or landline enrolled with ArchPass Duo used in conjunction with a UGA MyID password to access UGA systems.
Requiring two-factor authentication can help prevent fraudulent log-ins and will add an extra layer of protection to the systems university students and employees use every day.
ArchPass Duo is currently used to access restricted and sensitive data. ArchPass Duo will be expanded in phases. Beginning in January 2017, use of ArchPass Duo will be required to access the Remote Access Virtual Private Network (VPN).
“There’s a simple reason for that. Every time a hacker in Russia, Korea or Asia gets their hands on a MyID and password, the first thing they do is remote VPN into our campus systems and start looking around,” Chester said. “We need to prevent them from accessing our network, and two-factor authentication is going to help us do that.”
vLab, the University’s virtual computer lab, will be the first system with many student users to require ArchPass Duo, Chester said, with plans to implement the change in the spring of 2017. There are also plans to eventually require ArchPass Duo to log into Athena, he said.
“This is the way the world is going,” Chester said. “Most video game networks require two-factor authentication to log-in. The technology for two-factor authentication is evolving and getting better, and we will make improvements as it does.”
At this time, ArchPass Duo will not be required to access the on-campus wireless and wired networks or UGAMail.
During the address, Chester also addressed technology milestones and goals in other areas, including:
For more information about ArchPass, please visit archpass.uga.edu.
The State of Technology address can be viewed on Blackboard Collaborate.