Frequently Asked Questions
GO-Remote Access Service — Renewing Your Service
February 2017
1.What is GO-Remote Access Service?
GO-Remote Access Service is the new system for creating a secure connection to the Ontario Public Service (OPS) network when you are away from the office. Once connected, you will be able to access the same network resources (e.g., Outlook mail, shared drives and ministry applications) the same way you normally would in an OPS office.
It uses the Cisco AnyConnect program to access the OPS network, and new SafeNet hard tokens for generating login passcodes.
The current GO-Remote VPN service is targeted to be decommissioned in June 2017.
2.Why do I have to renew my access service?
The current system is being replaced with the new GO-Remote Access Service, which means anyone who received remote access to the OPS network prior to February 2017 must register for the new system.
There is no new cost for an existing VPN user to register for the new VPN service or to acquire the new token key.
If you, or a non-OPS employee you applied on behalf of, need to register for GO-Remote Access Service you will be emailed by GO-Remote Administration with instructions. Please wait for this email prior to attempting to register.
The current GO-Remote VPN service is targeted to be decommissioned in June 2017.
3.How is GO-Remote Access Service different from the current service?
GO-Remote Access Service does not use the old GO-Remote website for logging into and accessing the OPS network. It uses the Cisco AnyConnect program instead.
The old RSA SecurID hard tokens will not work with Cisco AnyConnect, and must be replaced with new SafeNet tokens.
All clients of the old GO-Remote VPN service will be contacted between February and May 2017 to register for the new GO-Remote Access Service.
4.How do I know if I have to register for GO-Remote Access Service?
If you,or a non-OPS employee you applied on behalf of, already have remote access to the OPS network, but:
- Use the old RSA SecurID hard token, and
- Use the GO-Remote website to access the OPS network
You will receive email instructions to register through the Service Order Desk Online (S.ODO) for GO-Remote Access Service and to receive a new SafeNet hard token.
Please wait for this email prior to attempting to registeryourself or a non-OPS employee.
For non-OPS employees:
- Your ministry administration will contact you and ask you to complete a new GO-Security Token Request Form and re-submit supporting documents
- Please wait for your ministry to contact you
If you have not been contacted to register for GO-Remote Access Service by May 15, 2017, please contact the OPS IT Service Desk at (416) 246-7171 or 1-888-677-4873.
5.How do I register to continue remote access service?
If you received remote access to the OPS network prior to February 2017, please wait for your email instructions to register for GO-Remote Access Service.
GO-Remote Access Servicebegins with a Service Order Desk Online (S.ODO) request to continue having remote access to the OPS network and to receive a new SafeNet VPN hard token key for generating login passcodes:
- Visit S.ODO and select “All Products and Services”
- Confirm your organization (i.e., ministry)
- Select “Networking Services”
- Select “Remote Access Services”
- Under “GO-Remote Access Services” select “Add to Cart”
- Under “Request Type” select “Re-Register Existing VPN Account”
- Please enter your userID (i.e. email address) and follow the directions
For non-OPS employees:
Ministries who are re-registering for a non-OPS employee must enter the non-OPS employee’s userID (i.e. email address) at Step 7, then:
- Under “Is this request for an OPS employee?” select “No”
- If the non-OPS employee does not have GO-PKI certificate select “No”and follow the directions
Ministries will then receive instructions to contacttheir non-OPS employees and ask them to complete a new GO-Security Token Request Formand re-submit supporting documents.
6.What is Cisco AnyConnect?
Cisco AnyConnect is a program already installed on all OPS computers that is used to log into and access the OPS network. It is located in the Start menu under “OPS Remote Access Service.”For Windows 10, “OPS Remote Access Service” is under “All apps” in the “Start” menu. If you can’t locate Cisco AnyConnect, please contact the OPS IT Service Desk.
For non-OPS employees:You will be provided instructions on how to download and install Cisco AnyConnect to your computer. Instructions are also in the GO-Remote User Guide. If you already have CiscoAnyConnect installed on your computer and need help configuring it, please contact your own IT support office.
7.What is a hard token?
A hard token is a small device that generates temporary serial numbers, used with your login credentials to access the OPS network.
The new GO-Remote Access Service requires new SafeNet tokens, because the old RSA SecurID tokens will not work with Cisco AnyConnect.
8.How long does it take to receive my new SafeNet hard token?
The typical mail delivery timeframe is 5-10 business days after your S.ODO request has been approved, and you have registered for a GO-Remote Access Service account.
If you have not received your token within 11 business days, please contact the IT Service Desk 416-246-7171 or 1-888-677-4873 request a status.
9.When should I activate my new SafeNet token?
Immediately. Once you receive your new token it must be activated within 31 days or your request will be cancelled, and you will have to submit a new S.ODO request.
10.Will there be any interruption to my service while I register for GO-Remote Access Service?
No. You can continue to use the current service and token, while you are waiting to complete registration for GO-Remote Access Service.
11.How do I dispose of my old RSA SecurIDhard token once I receive my new one?
To dispose of your old token once your new hard token is activated, please utilize the internal government mail system and send your old hard token to:
/ GO-Remote Access Service SupportInfrastructure Technology Services
Telecommunication Services Branch
222 Jarvis Street 6th Fl.
Toronto, ON M7A 0B6
12.Can I continue using my old RSA SecurID hard token?
No. The RSA SecurID hard token will not work with Cisco AnyConnect.
13.I did not receive an email about continuing my remote access, who should I contact?
If you have not been contacted to register for GO-Remote Access Service by May 15, 2017, please contact the OPS IT Service Desk at (416) 246-7171 or 1-888-677-4873.
14.What if I no longer need remote access to the OPS network?
The emails that ask clients to register for GO-Remote Access Service also include a link for cancelling remote access service.
Alternatively you can also visit S.ODO at any time to cancel your access and cease billing for this service.
15.What if I am on leave, vacation or secondment and I do not register for the new GO-Remote Access Service before the current service is shut down?
The current GO-Remote VPN service is targeted to be decommissioned in June 2017 and your account will expire.
16.How do I get more information about the GO-Remote Access Service?
If you would like more details about using GO-Remote Access service, please consult the GO-Remote User Guide. If you have any further questions please .
1