University Systems and Networking

FDU-Secure uses current encryption standards to connect to the FDU wireless network via secure wireless traffic. As a result, FDU-Secure is the preferred method of accessing the on-campus Wireless network.

Configuration Procedures

Start your laptop computer

Click on the Wi-Fi bar located at the right hand side of the taskbar

Click Network Settings > Wi-Fi > Network and Sharing Center

Select: Set up a new connection or network

• Choose a connection option: Manually connect to a wireless network
  • Network name: FDU-Secure
  • Security type: WPA2-Enterprise
  • Encryption type: AES
  • Security Key: [BLANK]
  • Check Start this connection automatically
  • Click Next

Click Change connection settings

Go to Security tab > Click Settings

• Check Verify the server’s identity by validating the certificate
  • Check Connect to these servers: radius.fdu.edu
  • Trusted Root Certification Authorities: AddTrust External CA Root
  • Notifications before connecting: Tell user if the server’s identity can’t be verified
  • Select Authentication Method: Secured password (EAP-MSCHAP v2)
  • Check: Enable Fast Reconnect

Configure Windows Login Name and Password.

• Click Configure

• Uncheck Automatically use my Windows logon name and password (and domain if any).

• Click OK.

Apply settings below, by clicking OK

Click: Advanced settings

• Go to 802.1X settings tab

• Check Specify authentication mode: User or computer authentication

• OK > OK > Close

When prompted for credentials, enter your FDU NetId info: Examples: “username@fdu.edu or username@student.fdu.edu”

Home drives and departmental shared drives come with a limited capacity of data storage, known as a quota. When a drive reaches 85% of that quota, both the departmental shared drive manager as well as the user uploading the content that puts a drive over that threshold will receive a message from psadmin@fdu.edu as seen below.

By informing the share manager and providing the name of the share affected, the share manager has an opportunity to respond to the notification prior to any disruptions to day-to-day workflows.

Upon receiving this email, the share owner should:

1. Review and confirm that all uploaded content is required for current business purposes
2. Review and consolidate any duplicated items
3. Remove any documents, files, or pictures no longer needed

These measures will resolve most shared drive quota issues. If the shared drive is still nearing
its storage quota, please fill out the Home/Department Share Management Form using the link below:

Home/Department Share Management Form

What’s Oracle?

Oracle is a product from Oracle corporation, that provides a relational database management system. Oracle’s database simply known as Oracle is a multi-model relational database management system, mainly designed for enterprise grid-computing and data warehousing. It is one of the first choices for enterprises for cost-effective solutions for their applications and data management. It supports SQL as a query language to interact with the database.

Now let’s discuss how to use Oracle in the FDU environment.

Accessing Oracle

FDU provides Oracle access to students and faculty on the Opus server. The Oracle environment is provided to support coursework and skill development.

Opus users are automatically granted access to Oracle after first successful login (It may take up to six hours before access is available).

If you do not already have Opus access you will need to request access by selecting “Opus (Linux) Request” on the FDU Forms site:

Access to the Opus server is restricted to FDU networks only. If you are off campus and would like to access Opus for your Oracle work you will need to use FDU’s Virtual Private Network (VPN).

You will need to use SSH to connect to the Opus server:

The Oracle Database is accessed using the SQL Plus utility, which has a command-line interface. To start using SQL Plus simply type “sqlplus /” on the Opus command line.

Interactive use can then start by entering a SQL statement (terminated by a semicolon), a PL/SQL block, or another command. For example:

SQL> select 'Hello world' as example from dual;

EXAMPLE
--------------------------------
Hello world

This article provides information about how to access OneDrive using browsers, mobile devices and in computers.

You can access OneDrive using browsers such as Microsoft Edge, Safari, Google Chrome or Firefox.

1. Sign-in to your account here: office365.fdu.edu
2. Click “App launcher” (icon located at top left corner ) which should show list of applications available to you and then click the “OneDrive” icon. This should open your OneDrive page either in new tab in your browser or in a new browser window.

You can access OneDrive in your iOS or Android devices.

1. Download and install the OneDrive app

2. Sign-in with your FDU NetID and password. Please select “OneDrive for Business” or “OneDrive for School” if given a choice to select type of account. DO NOT select personal OneDrive option if it is available. You’ll be presented with FDU’s Single Sign-On screen where you’ll be required to enter your NetID and password

1. If you are using Windows 10 computer, then OneDrive should already have been installed. If not, please follow steps below to download and install it in your computer
2. Sign-in to your account here: office365.fdu.edu
3. Click “App launcher” (icon located at top left corner ) which should show list of applications available to you and then click the “OneDrive” icon. This should open your OneDrive page either in new tab in your browser or in a new browser window

4. Click “Get the OneDrive apps” located at lower left corner which should download installation file for OneDrive
5. Execute this newly downloaded installation file which should install OneDrive in your computer
6. Start “OneDrive” and enter your NetID and click “Sign In”
7. Select “Work or School” option which should take you to FDU’s Single Sign-On screen
8. Enter your NetID and password

1. Click below to install OneDrive from the Mac App Store

2. Click “Get”
3. Click “Install”
4. Launch “OneDrive” and enter your NetID and click “Sign In”
5. Select “Work or School” option which should take you to FDU’s Single Sign-On screen
6. Enter your NetID and password

The ability to access a home drive or department shared drive remotely is only supported for FDU-owned equipment.

First, you need to ensure you have launched your Virtual Private Network (VPN) and logged in using your NetID and password.

1. Once you have connected via the VPN, open your File Explorer.

2. Halfway down the left panel, click on “This PC“. Your available Network Locations will appear in the center of the screen.

3. To access any of your drives, simply double click on the icon next to Drive description.

1. Go to your Finder app

2. On the menu bar on top, click “Go” and select the last option “Connect to Server…” or alternatively on your keyboard press and hold “command” then press “K“

3. In the Connect to Server window enter SMB:// followed by the path of your network share

In the case of your home drive this will follow the convention of:

• smb://root.fdu.edu/shares/users-madison/your NetID for Florham users
• smb://root.fdu.edu/shares/users-metro/your NetID for Metro users
• smb://root.fdu.edu/shares/users-vancouver/your NetID for Vancouver users

Pressing the “+” will add this to your list of Favorite Servers.

To help protect the University’s computers and networks from cyber threats, FDU OIRT is implementing Application Control with privilege management. This feature provides all users with rights to install applications as needed while continuing to protect resources from unknown and malicious risks.

All software is typically installed from a setup file. Any setup file for an application should only be downloaded from the developer’s official site. For example, to install Google Chrome, the setup file should only be downloaded from Google’s official site (www.google.com).

Any setup file on a USB drive, CD drive, or any other removable media should only be installed if provided directly from the developer or other credible source.

By default, the setup file will be located within the Downloads folder

C:\users\yourusername\downloads\

In order to install software on a university laptop with Windows 10, follow the process defined below:

1. Right-click the setup file for the application to be installed
2. Click “Run with Administrative Privileges (Audited)” on the setup file

3. Provide a valid reason for installation and use of the application in the space provided and press “Continue”

The application will now be installed with administrative privileges.

By default, the app installer file will be located within the Downloads folder

Users > YourUserName > Downloads

1. Launch the FDU Self Service Portal app located in the Applications folder

2. Click on “* I need to install software“

3. Click the “Allow Install” button

4. Click “Thank you.” when prompted

5. Launch the application installer for the software package you want to install on your MacBook

Your macOS application will now be installed with administrative privileges.

Legacy Authentication is a term Microsoft sometimes uses to describe basic authentication when used with its cloud-based services. This is in contrast with the term “modern authentication” which provides more security and capabilities.

Legacy Authentication Topics

Legacy (or basic) authentication is characterized by:

• A client or network protocol that is incapable or not configured to do modern authentication
  
• A client which sends both the username and password to the application
  
• An application using the username and password to get a logon token on behalf of the user

Modern authentication is characterized by:

• a client and service capable and configured to use OpenID Connect, SAML, and/or OAuth 2.0 for authentication AND
  
• a client and service which can accept redirects to the identity provider for all authentication interactions and can work with authentication tokens of the protocols above

All Microsoft cloud services are modern authentication capable.

Whether legacy or modern authentication is used is dependent on the client capabilities. To use modern authentication, you can, in many cases, update your client application or change to an alternative client application.

A list of known clients using legacy authentication is available. Transitioning from legacy authentication usually requires the individual user to change the client software they are using, which may require assistance from the Fairleigh Dickinson University Technical Assistance Center (UTAC).

Protection with two-factor authentication (2FA)

Legacy authentication can not be protected by 2FA. Because the password is known to the application accessed via legacy authentication, it is less secure than modern authentication. If legacy authentication is not blocked for your account, 3rd party applications can ask for your credentials and have your password without you being aware they do.

Transition from legacy authentication

For the typical user, the complexity of determining whether you are using legacy authentication is significant. If you are using one of the client applications that does not use modern authentication protocols (see section below for a list of known clients using legacy authentication), you should replace them. If you don’t have one of these client applications but still suspect you have legacy authentication, contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for assistance.

In most cases, users will need to do one or more of the following:

• Update their application to a version that supports modern authentication protocols
  
• Upgrade to the latest version of their phone operating system
  
• Remove and re-add their FDU account in the configuration of their iOS or macOS application so it will use modern authentication protocols

All three of these actions are informed by the list of known insecure client apps. FDU IT doesn’t know your devices like you do, nor do we manage which client applications you use, so only you can identify where action needs to be taken.

If you don’t seem to have one of the insecure client applications but still suspect you have legacy authentication, For the typical user, the complexity of determining whether you are using legacy authentication is significant. If you are using one of the client applications that does not use modern authentication protocols (see section below for a list of known clients using legacy authentication), you should replace them. If you don’t have one of these client applications but still suspect you have legacy authentication, contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for assistance.

1. Open “Settings“
   
2. Choose “Calendar” or “Mail“
   
3. Choose “Accounts“
   
4. Choose “Exchange” or “Google” – make sure you are choosing an account in the format fdunetid@fdu.edu

5. Choose “Delete account“

6. Confirm the deletion by choosing “Delete from my iPhone“

1. Open the “Gmail App“

2. Tap the Account icon in the top right to view all existing accounts

3. Tap “Manage Accounts on this device“

4. Select your @fdu.edu mail account from the list

5. Tap “Remove account“

To add your FDU Email account to an iOS device’s native “Mail” app follow the instructions on the link below:

This list is not intended to be comprehensive; it is only a list of known client applications. If you have one which should be added, please let us know.

You may see an email in your FDU inbox like this:

While the email message says it was sent by your IT department, it was not. This email message wasn’t actually sent–it only exists on your mobile device and was created to alert you to the fact that your client application can’t sign into your account. Your email access has not been blocked–it is only that this client application is broken. You can verify for yourself that your email access was not blocked by going to Outlook on the Web. And the reason the client application is broken is because it can only do legacy authentication OR it only has cached credentials which are based on legacy authentication.

There are several ways to determine if you’re using Basic authentication or Modern authentication. If you’re using Basic authentication, you can determine where it’s coming from and what to do about it.

Authentication dialog

A simple way to tell if a client app (for example, Outlook) is using Basic authentication or Modern authentication is to observe the dialog that’s presented when the user logs in.

Modern authentication displays a web-based login page:

Basic authentication presents a dialog credential modal box:

On a mobile device, you’ll see a similar web-based page when you authenticate if the device is trying to connect using Modern authentication.

You can also check the connection status dialog box, by “CTRL + right-clicking” the Outlook icon in the system tray, and choosing Connection Status.

When using Basic authentication, the “Authn” column in the “Outlook Connection Status” dialog shows the value of “Clear“.

Once you switch to Modern authentication, the “Authn” column in the Outlook Connection Status dialog shows the value of “Bearer“.