TRN009 Global AnyConnect VPN and VIP Code Instructions

Page 1 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1


Table of Contents

1.0 Purpose and scope 1
2.0 Installing the VIP Code and Device Registration 1
3.0 Installing the AnyConnect VPN 5
4.0 Connecting to Dako using VPN AnyConnect and VIP Code 7

1.0 Purpose and scope

In addition to the traditional Network password, the new method of network authentication will require a
second factor of authentication which will be a code that you will enter on your VPN login screen. This code
will be dynamically provided and refreshed every 30 seconds by the VIP application on up to 5 devices
(laptops, smartphone, tablet) that you previously registered on an authentication website. This new method
of authentication will require a new VPN access software: Cisco AnyConnect.

This instruction provides the following instructions to Dako VPN users:
- Installing the VIP security code-generator application 5 minutes
- Registering your device on the authentication website 5 minutes
- Installing the new Cisco AnyConnect VPN 5 to 10 minutes
- Logging to the network using Cisco AnyConnect by entering your user ID and two authentication factors:
(1) your regular network password and (2) your VIP code 1 minute


2.0 Installing the VIP Code and Device Registration
Below are the instructions for acquiring a Verisign VIP credential ID using a PC or a SmartPhone

2.1 Installing the VIP Access Code Application

PC: Download and install the program using this link: https://idprotect.verisign.com/desktop/home.v

SmartPhone (Optional): Download and install the program using this link: http://m.verisign.com
(Users with BlackBerry phones already have the VIP access program installed and can be found in
the Download folder or listed with other Blackberry applications)















Unique VIP Credential ID
One time Password / Security Code
Changes every 30 sec.

TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 2 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1





2.2 Register your device(s) by assigning the credential ID to your network account

Below is the URL for the Self Service Portal where you can assign your VIP credential ID to your
network username. Please use the following username formats when logging in.
For t he Americas use username@caus.dako.net
For Japan use username@jp.dako.net
For t he rest of t he world use username@dako.net



2.2.1 Log onto the Self Service Portal: http://vip.dako.com:8233/vipssp



2.2.2 Sign in using your network username and Password.






TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 3 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1


2.2.3 Click Register




Step 1) Run the VIP access program on the device you want to register

Step 2) In Credential Name type your full name (e.g. John Doe Laptop).

Step 3) In Credential ID write in the credential ID number (top box on VIP frame)

Step 4) Write the security code / one time password in the Security Code field (bottom box on VIP
frame).

Click Registrer

TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 4 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1





Step 5) Submit

Repeat steps 1-5 for other devices up to a maximum of 5.


2.2.4 Sign out
Type in your full name
Credential ID of the VIP
access you want to
register

Security Code / One time
Password

TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 5 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1



3.0 Installing the AnyConnect VPN
If you have not already been provided with VPN access, you may request access by sending an email to your
local help desk.

3.1 Download and install the Cisco AnyConnect VPN client:

3.1.1 Connect to the Internet.
3.1.2 Users in Europe or Asia should navigate to https://vpn.dk.dako.com
3.1.3 Users in the Americas should navigate to https://vpn.us.dako.com
3.1.4 Log in using your full network username and password.
For t he Americas use username@caus.dako.net
For Japan use username@jp.dako.net
For t he rest of t he world use username@dako.net


3.1.5 Click Continue


TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 6 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1




3.1.6 From the menu on the left click AnyConnect






3.1.7 Click Start AnyConnect.


3.1.8 Installation will start and take place without any required input. Even if you dont see any activity
it is installing so do not cancel.


TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 7 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1





3.1.9 Upon completion you will see the Cisco AnyConnect icon in your system tray.



3.1.10 You can double click the icon in the system try to see the new AnyConnect VPN interface.


4.0 Connecting to Dako using VPN AnyConnect and VIP Code

4.1 Launch Cisco AnyConnect from the start menu and type in your connection address.

vpn.us.dako.com for North and South America
vpn.dk.dako.com for rest of world


TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 8 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1




4.2 Press the connect icon

4.3 Select the connection group VIP.


4.4 Type in your domain username, password and click OK.
NOTE: you must use your full user name including the domain name so the VPN knows where to
authenticate you.
Examples are:
username@dako.net DK, AU, AT, BE, CH, CN, DE, FR, IT, ES, UK users
username@caus.dako.net Carpinteria, BR, CA users
username@jp.dako.net JP users


4.5 Start your VIP Access application on any of your registered devices to obtain a VIP code

4.6 Enter your 2-Factor authentication security code (VIP code) and click Continue.

TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 9 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1




4.7 Click Accept.


4.8 Users may login using the alternate site if experiencing problems with their primary connection by entering
the other address noted in step 4.1.

TRN009 Global AnyConnect VPN and VIP Code Instructions
Page 10 of 10
Instructions
Doc. No.: TRN009

References: N/A Effective Date: 2012-08-24
Rev.: 2.1


Document Change Request Form
Global IT

Approvals can be submitted by sending a signed hardcopy or scanned electronic copy of this form to Global IT QA &
Security or by email to ServiceDesk (INS, TRN and FRM documents).


Author(s): Robert Guerrero
Created: 13 Apr 07
Review: Name/Title: Travis Moon, Manger Global IT Infrastructure
Date:14 August 2012
Approval: Name/Title: Lynette Girvin, Manager, IT Support
Signature & Date:
Name/Title: Robert Guerrero, Manager, Global IT Projects
Signature & Date:
Name/Title: Travis Moon, Manager, Global Infrastructure
Signature & Date:
Name/Title: Henrik Stoklund, Manager, Technical Systems
Signature & Date:
Distribution:
Copy No. Name Location
1 Travis Moon Internal IT, California
2 Henrik Stoklund Internal IT, Glostrup
Change Record: Date Version By Description
13 Apr 2007 1.1 RGuerrero Global Draft
5 Jun 2007 1.2 RGuerrero Added other site user names
24 Jul 2009 1.3 LGirvin Updated and reformatted for Portal
2 Feb 2010 1.4 TMoon New screenshots. Updated to reflect
current practice.
15 Aug 2011 1.5 LGirvin Updated URL and image w/o US-CO
28 Nov 2011 1.6 LGirvin Updated domains in section 2.3.3.
14 Aug 2012 1.7 rguerrero Updated for AnyConnect
22 Aug 2012 2.0 Lgirvin; Included information for VIP 2-factor
authentication
24 Aug 2012 2.1 Lgirvin Minor updates for clarification