Hello. This video is intended for health professional
students who seek to obtain remote
access to HealthLink from their personally
owned Apple device. The first step to
obtain access is to complete the remote access
training in Canvas. Please click on the link
here to begin the course. Once completed,
please save a copy of your completion
certificate as you will need to upload
this in the next step. Part 2 of Step 1 requires
you to fill out and sign the SMPH Medical Student
Remote Access Acknowledgment by clicking on the
link located here. Once submitted,
Shared Services IT will need to verify and
approve your access, which may take several
days to complete. Once your access
has been approved, an email will be sent out
to your university email. Once you've completed
the Canvas course and filled out the
acknowledgment, you can begin your computers
enrollment process. Please make sure
your device is up to date with the current
operating system updates, or you will not be able to
enroll with your device. To check your Apple
device for updates, click on the Apple logo
on the upper left, then click on "System
Preferences", locate the Software Update icon, and then either
check for updates, install pending updates or note that your device
is fully up to date. Once your computer
is fully updated, please click on the "MAC Instructions for Student
Workspace ONE Enrollment for MacOS" located here. In order to successfully
enroll your device, the following policies
must be completed. The first policy is the
device encryption policy. Your device must be
encrypted to ensure protection if it were to
fall into the wrong hands. If your device is not
already encrypted, please click on this link for a guide on how to
encrypt your device. To check if your
device is encrypted, click on the Apple logo in
the upper left-hand corner, then select "System
Preferences", then locate and click on
"Security & Privacy". Next, select the
"FileVault" tab at the top. As you can see here,
"FileVault" is turned on. Next, please check
to ensure that your device meets the password requirement for enrollment. Your password must be at
least eight characters long. Even if compliant, Workspace ONE may require you to
update your password, which will be seen
later in this video. If you have already updated
your device from earlier, then your device
should already meet the MacOS version Policy. Please note, in order to continue future
access to HealthLink, please keep your
device up to date. The last policy is the
device check-in policy, which as long as your
device establishes an Internet connection at
least once every 21 days, you do not need to do anything else to ensure you
meet this policy. Now that our device meets
the required policies above, let's install Workspace
ONE Intelligent Hub Agent from the link located here. Locate and click on the button
that says "Download Hub". Then locate and open
the downloaded file to begin the installation. Click "Continue"
and then "Agree", to accept their
license agreement. Then select "Install". You may need to approve
the installation with your computer's
credentials as seen here. Once the installation
is complete, please refer back to
our confluence guide. Next, we'll open the Workspace ONE Intelligent Hub Agent by locating and clicking on the shield-like icon
in the top toolbar, and then selecting "Enroll Now". Once the application loads, the first prompt asks
for the server address, which we'll type
in mdm.wisc.edu. We are then prompted
for a group ID, which we'll type SMPH-Students. Please note that this
is case-sensitive, and then click on "Next". The next screen
prompts you to enter in your UW net ID and password. Once entered, the login process may take a couple
minutes to complete. You will then be
prompted to accept the UW SMPH terms
and conditions, and then click "Next". You should now see a loading bar that is enabling
device management. During this installation, you should be notified
about needing a profile installed and that system preferences
should automatically open. If system preferences does
not automatically open, please click on the Apple
logo in the upper left, select system preferences, and then locate and select
the profiles icon. Next, we need to
select Install under the workspace services
profile located here, and then select Install again. Then you may need to enter in your device's credentials in order to approve
the installation. You should then see a few
more profiles added to your device and a
congratulation screen in the Intelligent Hub agent. You can then click "Done" and minimize the Intelligent
Hub agent app. As previously
mentioned, workspace 1 requires your
password to be updated. As seen here, please click on
the "Change Password" icon. Once you've filled out the form, click "Submit" to approve
the password change. And then click "Ok"
on the pop up, notifying that your login and KeyChain password
has been updated. The next step is to
install and configure the SMPH VPN client
known as GlobalProtect. Back in our confluence guide, we have provided a link located here on how to install
GlobalProtect. Begin by downloading the client. Open the downloaded
file and make sure the checkbox next
to GlobalProtect is checked and select Continue. Then select Install and enter in your devices credentials
to approve the install. Back in our confluence guide, we have provided a
link on configuring the GlobalProtect VPN
client located here. First, we'll open
GlobalProtect by clicking on the globe icon in
the top toolbar. Next, we will enter in
our portal address, which is smph.vpn.wisc.edu. You will then enter
your UW NetID and password and
click "Sign In". You should then be prompted
for a duo push or pass code, and once entered,
you'll be connected. If you do not see the option
to enter a portal address, you may have already previously
configured the portal. You may see uwmadison.vpn.wisc.edu
as the current portal, and this needs to be changed. On the login screen, click "Cancel" and then select the three horizontal bars in the top right and
then select Settings. Click on the plus
icon located in the lower left to add a
new portal address. This is where you would
normally enter in smph.vpn.wisc.edu, and
then click "Save". Please note that
I am entering in uwmadison.vpn.wisc.edu
to show you how to switch the portals. Then close out of the
settings dialog box and re-open GlobalProtect. You can now see a drop down box next to the portal that
allows us to switch from UW Madison VPN
to the SMPH VPN. Step 4 is setting up your
multi-factor authentication, and instructions on completing
this are located here. Please keep in mind that this multi-factor
authentication is for UW Health and it
is not the same as UW Madison's duo
authenticator app. This app uses the
Microsoft authenticator. Once this has been completed, you are ready to connect
and log in to HealthLink. Make sure your device
has already connected to the SMPH VPN and GlobalProtect, and then click on the UWH
icon that was added to your Apple Doc or open a new web browser and go
to citrix.uwhealth.org. Here, you should
use your UW Health provided credentials to sign in, which will then give you
access to all HealthLink apps.