Go-Remote Access Service

1 User Guide Go-Remote Access Service Complete Guide for Registering and Accessing the OPS Network Version December 4, 2020 2 Document Revision History Date Version Description of Changes Contributors December Initial draft Katie Topic December 29, 2016 Combined OPS and NonOPS Dennis Sithoo January 4, 2017 Process updates Dennis Sithoo January 6, 2017 Process updates Dennis Sithoo, Sameh Akladios, Katie Topic January 9, 2017 Process updates Dennis Sithoo January 10, 2017 Updated screenshots Dennis Sithoo, Sameh Akladios, Katie Topic January 12, 2017 Process updates Dennis Sithoo, Sameh Akladios, Katie Topic January 18, 2017 Updated screenshots Dennis Sithoo, Sameh Akladios, Katie Topic March 23, 2017 Process updates Dennis Sithoo, Sameh Akladios, Katie Topic April 3, 2017 Updates to links Dennis Sithoo April 24, 2017 Update to soft token, screen shots Scott McCormick, Sameh Akladios, Katie Topic May 5, 2017 Minor edits Emilia Chilman May 8, 2017 Update for AODA compliance Daniel Petrangelo July 25, 2019 Updated logos January 17.

2 2018 Updated links of Go-Remote website, updated steps in process for Non-OPS employees. Carlo Milocco, Bertrand Rodricks, Shubham Vaghasiya July 24, 2020 Updates to include Soft Token process, and Carlo Milocco, Bertrand Rodricks, Shannon McGuff August 18, 2020 Updated document and added Global Protect process. Josette Couto, Ross Morra, Bertrand Rodricks, Shannon McGuff August 20, 2020 Updated VNP User Guide and all embedded collateral to be AODA compliant. Josette Couto, Carlo Milocco August 21, 2020 Replaced embedded docs with links to make document AODA Compliant. Josette Couto, Carlo Milocco Dec 4, 2020 Replaced embedded soft token flow Carlo Milocco 3 Contents Document Revision History.

3 2 Introduction .. 4 Registration Process for Non-OPS Employees: .. 5 Registration Process for OPS Employees .. 5 Hard Token Activation Process .. 6 Step 1: Submit a Request for Go-Remote Access Service .. 7 Step 2: Complete User Authentication (Registration link) .. 8 Step 3: VPN New Service Activation VPN Token Activation and User ID .. 12 Step 4: Activate your SafeNet Token .. 13 Step 5: Access the OPS Network 15 Soft Token Activation Process .. 16 Step 1: Submit a Request for Go-Remote Access Service .. 17 Step 2: Complete User Authentication (Registration link) .. 18 Step 3: VPN New Service Activation - VPN Token Activation and User ID.

4 22 Step 4: Activate your SafeNet Token .. 23 Registration Process for Non-OPS Employees .. 25 Step 1: Submit a Request for Go-Remote Access Service .. 26 Step 2: Complete User Authentication (Registration link) .. 31 Step 3: VPN New Service Activation - VPN Token Activation and User ID .. 35 Step 4: Activate your SafeNet Token .. 36 Step 5: Download Cisco AnyConnect and Access the OPS Network .. 39 Logging into the OPS Network .. 44 Disconnecting from the OPS Network .. 45 Online Self-Administration .. 46 Returning Defective / Unused Tokens .. 47 Contacts for Support .. 47 4 Introduction Go-Remote Access Service is a secure connection to the Ontario Public Service (OPS) network when working remotely from the office.

5 Once connected, you will be able to Access the same network resources ( , Ministry systems and shared drives) the same way you normally would in an OPS office. This guide is for OPS employee and Ministry sponsors/ managers who are applying on behalf of a non-OPS employee, for Go-Remote Access Service . This guide explains the process of registering for the Service and its use. 5 Registration Process for Non-OPS Employees: Non-OPS employees external contractors, partners, vendors will be provisioned to receive a hard token. Follow this link to go to the Registration Process for Non-OPS Employees section in this user guide Registration Process for OPS Employees The following processes are for all OPS employees (and a small number of others) who have GO-PKI security credentials for logging into WIN.

6 Reference the flowchart below to determine the process to follow in this document based on the type of token that has been provisioned to you. Only Government-issued computing devices should be used for remote Access to the Government of Ontario network Link to Hard Token Activation Process section in this user guide. Link to Soft Token Activation Process section in this user guide. 6 Hard Token Activation Process 7 Step 1: Submit a Request for Go-Remote Access Service The process starts with the submission and approval of the request for Go-Remote Access Service for an OPS employee through the Service Order Desk Online ( ): Visit and select All Products and Services Confirm your organization ( Ministry) Select Networking Services Select Go-Remote Access Services or for Access to data centre applications (a Data Centre VPN), select Data Centre Networks Services.

7 Under Go-Remote VPN (Individual User Accounts) Services select Add to Cart or for DC Access select Data Centre VPN Account Under Request Type select: Add New VPN Service Access Complete the user information based on the request that appears, then hit save Once your Ministry program area s approver (manager) approves your request, you will receive three (3) emails from with the following subject lines: 1st email: VPN Registration Notification Step 2 Registration link (1 of 2) 2nd email: VPN Registration Notification Step 2 Registration link (2 of 2) 3rd email: VPN New Service Activation - Step 3 VPN Token Activation and User ID (post registration) 8 Step 2: Complete User Authentication (Registration link) 1st email: Invitation to Register for Go-Remote Access Service Registration Link Once your request for Go-Remote Access Service is successfully processed an email with a registration link is sent to the address provided by you in your request.

8 A registration code will be sent in a separate email. 9 2nd email: Providing your registration code to use to authenticate yourself to the new Go-Remote Access Service This 2nd email is sent in parallel to the 1st email. The registration link and the registration code must be used to complete the authentication process. 10 Note: Three registration reminders will be emailed to you. Your request will be cancelled if you do not complete your registration within 30 days. Online Authentication and Registration Follow the link in the registration notification email using Internet Explorer to begin self-registration.

9 You will be directed to a GO-PKI login page where you must log in using your credentials, the same way you log into WIN: Locate your GO-PKI profile Enter your GO-PKI password Click Sign In Subscriber Agreement Acceptance and Digital Signature After you sign in using your PKI credentials, read the terms and conditions of use, and then verify your agreement using the checkbox at the bottom of the page. (screenshot example provided below). 11 User Information Confirmation Then confirm your user details and your mailing address this information will be used for your User ID and to send your SafeNet token.

10 The Client information section will have all your client information as submitted by The Token mailing address will be used to mail you your new SafeNet Token. You can choose your office address if you would like your new token to go to your office location. Completion You have now completed your registration and will receive an email from with your credentials and next steps. 12 Step 3: VPN New Service Activation VPN Token Activation and User ID Receive User ID and SafeNet Token SafeNet Token You will receive an email with your User ID (the email address you supplied) and a hyperlink that you will need to Access to complete your registration.