Network registration (NetReg): General questions about network registration.
Departmental (non-public) Users: Questions about network registration for departmental computers on the UR wired network.
Public Computing Users: Questions about network registration for public computers on the UR wired network, including libraries and training facilities.
The University network is only as secure as its weakest link. No matter how robust our security systems are designed to be, any single computer connected to the network that is not patched, or does not run anti-virus, or is otherwise vulnerable can become the victim of an attack and infect other computers on the network.
The goal of network registration is to associate a user to each computer connected to the University network so that IT can respond more quickly to security and network incidents.
All computers that connect to University networks (except guest networks) must be registered. This includes networks in departments, the IT Center, Library, kiosks, classrooms, and labs.
Network registration has been in place on wireless networks for several years. Public computers in the IT Center, Library, kiosks, classrooms, and labs began using network registration in January 2011. Departmental systems began implementing network registration in September 2011.
The wireless experience will depend on which wireless network you connect to. UR_RC_InternalSecure uses NetID and requires web-based registration on each use. UR_Connected uses a UR Active Directory account and supports automatic re-registration.
Network registration on the wired subnet will vary depending on the network segment. Public computers in areas such as the IT Center, Library, public kiosks, and labs will require you to login to the computer with your UR Active Directory account in order to use the computer. Registration occurs automatically at login. Departmental computers will typically require an annual web-based registration process. Computers that are bound to the UR domain and have the SafeConnect Policy Key software agent pre-installed will automatically complete the registration upon login.
A UR or URMC-SH Active Directory account is needed for wired network registration.
For public computing systems, network registration occurs automatically upon login.
For departmental computing systems that use Windows/Mac OS X, you will need to register a device when it is initially connected to the network and will be prompted to re-register the system annually.
For departmental computing systems that use Unix/Linux, you will need to complete web registration once per month.
If you have a Windows or Mac computer and are using the Policy Key software agent installed, you will need to register your computer annually. If you are using a system without the Policy Key software agent installed, you will need to register your computer annually as well as each time your computer is off of the UR network for an extended period of time (1 week+).
Safe•Connect is the network registration product being utilized to provide wired network access to devices that comply with University of Rochester IT policy. University IT reserves the right to monitor systems necessary to protect the integrity, security, or functionality of campus-wide computing resources, when it is suspected that an account or system is engaged in unusual or excessive activity or it has good cause to believe that regulations, rules, or laws are being violated.
Safe•Connect will require users to register a system with a username and password before allowing them to use network services. When you register, the system records which network address you were assigned and how long you used it. Your username and password are your keys to the network; don't share them with anyone. You are responsible for all acts performed using your account, including copyright violations. If you are concerned that someone may be able to use your account, change your password immediately.
First and foremost, you must know your UR or URMC-SH Active Directory username and password. Your password should be kept secret. Do not ever write it down or share it with anyone. If you do not have this information, please contact the University IT Help Desk at 585-275-2000 or UnivITHelp@Rochester.edu.
You may need to install the Safe•Connect Policy Key software agent if your computer is running Microsoft Windows or Mac OS X.
Windows 2000, XP, Vista, 7, 8
Mac OS X 10.5 - 10.8
View installation information for Windows.
View installation information for Mac .
Printers and other devices
Please contact University IT at 585-275-2000 if a new printer or other network device is being added to the network.
The Safe•Connect Policy Key software agent is required for most Windows PCs and Mac computers in order to gain network access and ensure a safe computing environment.
You can uninstall the Safe•Connect Policy Key software agent at any time; however within minutes you will then be unable to access the Internet through the University of Rochester wired network. You will be required to reinstall the Policy Key software agent as if you are a new user in order to gain Internet access.
On Windows computers, you can right-click any blank space on the task bar at the bottom of your screen and select the option "Task Manager". When the Windows Task Manager appears, click the "Processes" tab and then click on the "Show processes from all users" button in the lower left, if there is one. Look for the processes "SCClient.exe" and "scManager.sys," both should be present.
Mac OS users can open the Activity Monitor located in the Utilities folder. From the Activity Monitor, look for the processes "SafeConnect" and "scManagerD," both should be present. If you have only recently installed the Macintosh Policy Key software agent, both processes may be called Safe•Connect.
If these small applications are uninstalled or disabled, the system will disallow network access until you re-register and reinstall Safe•Connect.
Safe•Connect ensures the system has been registered and may check to ensure the Policy Key software agent is installed and running on Windows and Mac OS systems.
Your privacy is important to us. Safe•Connect maintains a record of:
The Policy Key software agent software application can be easily removed when one no longer needs to connect to University of Rochester wired networks.
Impulse Point, the company that created the Safe•Connect product, has released a privacy statement that is available for download in PDF format here: Safe•Connect Privacy Statement.
No, Safe•Connect tracks only your network registration.
If University policy is changed to make more detailed inspections of registered systems, University IT will provide advanced notice before implementation.
If you would like details about a warning screen you have received, call 585-275-2000 for personal assistance.
Open the Applications folder and double-click the application 'Uninstall SafeConnect.' Click OK and enter your MAC OS X admin credentials when prompted.
On Windows 2000 & XP
Open the Control Panel and choose Add and Remove Programs. Find SafeConnect in the list and choose Uninstall.
On Windows Vista, 7 & 8
Open the Control Panel and choose Programs and Features. Find SafeConnect in the list and choose Uninstall.
Devices not capable of user registration may be added to an "open access" policy. Note that such devices may be reconfigured to use a private IP address. Departmental system/network Administrators can contact University IT at 585-275-2000 in the event a device is incapable of registering.
Best practice would see printers with private or internal IP addresses, which do not require network registration. If business needs call for the printer to have a public IP address, the public IP can be moved to an open access policy. Departmental system/network administrators can contact University IT at 585-275-2000 to have an IP moved to an open access policy.
Unable to Install Policy Key software agent on Mac OS X 10.4 or lower:
The Safe•Connect Policy Key software agent cannot be installed on computers running OS X 10.4 or lower. University IT recommends that faculty and staff request a computer upgrade of their college-owned machines and that students, if possible, upgrade their own machines to OS X 10.5 or above. If for some reason you cannot upgrade your computer to 10.5 or above, please contact 585-275-2000 for further assistance.
Blackboard Loads Instead of My Homepage:
Occasionally, and each time you need to authenticate, you will be redirected to Blackboard instead of your homepage when opening a web browser. However, you should still be able to browse the web uninterrupted.
I browsed for a few minutes and then was asked to authenticate. Why is this?:
Safe•Connect may not catch your computer immediately after turning it on. Rather, it may catch your computer and ask for registration after traffic has passed across the network. If you find yourself unable to continue browsing simply open a browser and register.
Why am I being prompted to re-install the Safe•Connect Policy Key software agent?
You are asked to re-install the Safe•Connect Policy Key software agent if the network registration system is unable to detect that the Safe•Connect Policy Key software agent is properly running. This may happen for one of the following reasons:
I receive a certificate warning message when I try to navigate to a non rochester.edu page to complete the network registration process:
If the non rochester.edu page that you are trying to navigate to is an https page (such as https://www.google.com), you will receive a browser certificate warning message. Try navigating to a website that is not an https site (such as www.cnn.com).
I receive a certificate warning message in my Outlook email client:
If your computer has not yet completed the network registration process and you try to access your email via an Outlook client, you will receive a certificate warning message related to impulse.com. You will need to open a web browser, navigate to a non rochester.edu website and authenticate with your credentials after your browser redirects you to the network registration web page.
You will have access to the local network wherever you connect your computer. If you do not register, you will not be allowed outside of your local network.
Based on authentication credentials, individuals have access to all University network resources, or are routed to an external network with limited network resources.
network registration captures UR Active Directory username and session information. For example, it does capture the login/start date and time as well as the logoff/end date and time, your UR Active Directory username, the hardware (MAC) address of the network card in your system, and the IP address used. This information is used for "forensic" reasons in logs that University IT Security & Policy may need to investigate abuse or illegal activities as the result of a Court Order.
Contact 585-275-2000 or go to the IT Center to discuss the web site. The IT Center staff has the ability to provide access if deemed allowable.
Public users have access to all .gov, .edu, .mil, .museum, .org and some .com sites (google.com). Public users do not have access to most .com sites. If you need additional .com access, please apply for a Visitor ID.
Click on the desktop icon "Obtain Visitor ID" and follow the on-screen directions
Visitor can visit most web sites. Access is denied for pornographic and identified malicious sites.
Most likely, you are still logged in as a Public user. Log out of the computer and then login with your new Visitor ID and password
Guest NetID's will not allow you to authenticate into public machines. You must use Public or Visitor ID's.
Go to https://myIdentity.Rochester.edu and follow the web page directions.
No – you can use username Public and password Public to obtain limited Internet access
There is an internal document as well for the IT Center staff. It is available to their NetReg Clients in their knowledge base. If you have what you consider to be a "Frequently Asked Question" and do not see it here, please call 585-275-2000 or send the question in e-mail to UnivITHelp@rochester.edu.
Other connectivity resources are available at the "Getting Connected" location.