Termination of Password-Based Authentication for the IKEv2 VPN Service

Dear all,

Kyoto University VPN (IKEv2) will no longer be able to connect by password authentication in late August 2022. Therefore, for those who are using the VPN (IKEv2) to access campus services from off-campus, please add client authentication settings to each terminal before the end of the service. Client certificates required for client authentication must be issued and configured for each individual terminal.

Therefore, please note that this service is not available for shared terminals where a user is shared.

*Please delete the VPN (IKEv2) setting with the password authentication after the password authentication service is terminated.

Date and time of IKEv2 service termination by a password authentication

• VLAN fixed connection service:  August 22, 2022 at 9:00
• General connection service:  August 29, 2022 at 9:00

How to check if client authentication is configured in each VPN (IKEv2)

Please refer to the following manual for confirmation.

• [EN] IKEv2 configuration check (whether client authentication is used or not)（Googleスライド）

What to do if client authentication is not used (password authentication)

The basic flow is as follows

1. Connect to the Kyoto University campus network
2. Issue a client certificate for each terminal and install it
3. Add IKEv2 settings

For more information about the settings and other details, please refer to the following notice from the Organization for Information Environment.

• Notice of Termination of Password-Based Authentication for the IKEv2 VPN Service

Regards,

Information Processing Office.