Skip to main content

Windows: Connect to the Stanford VPN with a Cardinal Key

Two-factor authentication will be required for Cardinal Key VPN starting March 6. Learn more about the change.

Note: 

  • If your device is not compliant, you will be unable to use Cardinal Key to connect to the Cisco AnyConnect VPN.
  • Security Key devices do not work in the Cisco Secure Client VPN login process. You'll need to use Duo Push or other configured methods.
  • For clients accessing restricted library resources remotely, please use either the "Stanford" or "Stanford-Full" profile when connecting to the Stanford VPN. 

You can connect to the Stanford VPN using a Cardinal Key on your device to authenticate. This eliminates the need to enter your SUNet ID and  password, although two-step authentication authentication is still required. 

You'll need to use the Cisco Secure Client VPN client to connect to the Stanford VPN with a Cardinal Key.

Two types of Cardinal Key VPN connections are available:

  • CardinalKey (split-tunnel) allows access to anything at stanford.edu via the VPN connection but non-Stanford traffic flows normally on an unencrypted internet connection.
  • CardinalKey-Full (non-split-tunnel) encrypts all internet traffic from your computer but may inadvertently block you from using resources on your local network, such as a networked printer at home. However, this also allows access to library journals as if you were on campus.

Before you begin

Make sure you have the following installed on your device:

Connect to the Stanford VPN using a Cardinal Key for Windows

  1. Launch the Cisco Secure Client client. If you don't see Cisco Secure Client in the list of programs,  navigate to Cisco > Cisco Secure Client.
     
  2. When prompted for a VPN, enter su-vpn.stanford.edu then click Connect.
    su-vpn.stanford.edu screenshot 
     
  3. Next, the prompt for two-step authentication displays. Depending on your screen resolution and window placement, the Duo pop-up window may cover the profile selection window. If you do not see the profile selection window, move the Duo pop-up window out of the way (do not close it). 
    Duo blocks drop down prompt
     
  4. In the Group list, select either CardinalKey or CardinalKey-Full and then click OK.
    screenshot of grouplist
     
  5. A notice briefly appears in the notification area to show that you are connected to su-vpn.stanford.edu.

     

  6. If you no longer require a VPN connection, click Disconnect to disconnect from su-vpn.stanford.edu.


     


     

Connect to the Stanford VPN without a Cardinal Key

If you decide that you do not want to use a Cardinal Key for authentication, you can connect using your SUNet ID and password, followed by two-step authentication. On the VPN website, see Connect to the Stanford VPN for instructions.

Last modified