The UMVPN is automatically installed on all MiWorkspace Mac devices and is used to access your home directory and department drives.
As of November 2026, you will be prompted to complete multifactor authentication (MFA) via Okta when connecting to the UMVPN. However, the UMVPN profiles have not changed and still include "Duo" in their names (e.g., Connect UMVPN (All Traffic - Duo Push)).
Sensitive Data Users
MiWorkspace Mac users who work with sensitive data are asked to take the added precaution of always using the Connect UMVPN (All Traffic - Duo Push) profile when using a wireless connection or an off-campus connection of any kind. This provides enhanced network protection for the university's sensitive data. The Connect UMVPN (All Traffic - Duo Push) profile is automatically installed on your device. If you use a MiWorkspace Mac device and store sensitive data and this option is not available on your device, please contact the ITS Service Center.
First-Time Setup
Before connecting to the UMVPN for the first time, open System Settings and set the VPN to show in your Mac’s menu bar.
- Click the Apple menu and select System Settings.
- Click Control Center.
- Under the Menu Bar Only section, click the drop-down menu next to VPN and select Show in Menu Bar.
Connecting to the UMVPN
Click the VPN icon in the menu bar, and then select the VPN you wish to use. Log in with your uniqname and UMICH password, and complete MFA if prompted.
- When prompted for MFA, you will automatically receive a push notification to your primary enrolled device. You will not see the MFA prompt to select your authentication method.
- If you receive a passcode with an Okta hardware token or YubiKey instead of a push notification, you can enter it using the "password,passcode" format.
You can choose from two VPN profiles:
- Choose Connect UMVPN (All Traffic - Duo Push) if you are on an unknown or untrusted network, like a coffee shop or airport.
- MiWorkspace Mac users who work with sensitive data are asked to take the added precaution of always using the Connect UMVPN (All Traffic - Duo Push) profile when using a wireless connection or an off-campus connection of any kind.
- Choose Connect UMVPN (Only U-M Traffic - Duo Push) if you are on a known and trusted network, like your home network.
The built-in macOS VPN client does not automatically save your login credentials. If you do not wish to re-enter your account name and password each time you connect to a VPN profile, you can save your login credentials. Note that this is not recommended for shared devices with multiple users.