University of Rochester
NetReg-FAQ
[Windows Setup] [Mac Setup] [Linux / Unix Registration] [* FAQ *]
Welcome to the network registration FAQ. It is divided into categories. They include:
Network registration (NetReg): General questions about network registration.
Departmental (non-public) Users: Questions about network registration for departmental computers on the UR wired network.
Public Computing Users: Questions about network registration for public computers on the UR wired network, including libraries and training facilities.
Network Registration (NetReg)
1. What is the purpose of network registration?
2. Who is required to use network registration?
3. When will network registration start?
4. Are there any differences between my wired and wireless experience with network registration?
5. What type of account do I need to use NetReg?
6. How often do I need to register?
Departmental (non-public) Users
1. How often do I need to re-register with network registration?
2. What is Safe•Connect and why is it being used?
4. What operating systems does the Safe•Connect Policy Key software agent support?
5. How do I get and install the Safe•Connect Policy Key software agent?
6. Do I have to use the Safe•Connect Policy Key software agent?
7. How do I know the Safe•Connect Policy Key software agent is running?
8. What are the things Safe•Connect checks for?
10. Does Safe•Connect track how I use my computer?
11. Will I receive a notice if Safe•Connect is changed to implement other features?
12. Where do I get help with a warning message I received from Safe•Connect?
13. How do I uninstall the Safe•Connect Policy Key software agent?
14. What if a device is not capable of user registration?
15. Can printers have public IP addresses?
16. Known Issues with Safe•Connect
17. Will I have access to my department's network?
Public Computing Users
1. What determines the level of access I have?
2. What information does NetReg capture about me?
3. I need access to a website that is blocked but shouldn't be?
4. Why can't I go to certain sites while logged in as a Public user?
5. How do I obtain a Visitor ID?
6. Why can't I go to certain sites while logged in as a Visitor?
7. I have obtained a Visitor ID, but why can't I get to .com sites?
8. Why can't I login with my Guest NetID to public computers?
9. Why can't I login to public machines? I can login to my personal machine and my NetID works.
10. Do I need to get a Username and Password to access public computers?
Network Registration (NetReg)
1. What is the purpose of network registration?
The University network is only as secure as its weakest link. No matter how robust our security systems are designed to be, any single computer connected to the network that is not patched, or does not run anti-virus, or is otherwise vulnerable can become the victim of an attack and infect other computers on the network.
The goal of network registration is to associate a user to each computer connected to the University network so that IT can respond more quickly to security and network incidents.
2. Who is required to use network registration?
All computers that connect to University networks (except guest networks) must be registered. This includes networks in departments, the IT Center, Library, kiosks, classrooms, and labs.
3. When will network registration start?
Network registration has been in place on wireless networks for several years. Public computers in the IT Center, Library, kiosks, classrooms, and labs began using network registration in January 2011. Departmental systems began implementing network registration in September 2011.
4. Are there any differences between my wired and wireless experience with network registration?
The wireless experience will depend on which wireless network you connect to. UR_RC_InternalSecure uses NetID and requires web-based registration on each use. UR_Connected uses a UR Active Directory account and supports automatic re-registration.
Network registration on the wired subnet will vary depending on the network segment. Public computers in areas such as the IT Center, Library, public kiosks, and labs will require you to login to the computer with your UR Active Directory account in order to use the computer. Registration occurs automatically at login. Departmental computers will typically require an annual web-based registration process. Computers that are bound to the UR domain and have the SafeConnect Policy Key software agent pre-installed will automatically complete the registration upon login.
5. What type of account do I need to use for wired network registration?
A UR or URMC-SH Active Directory account is needed for wired network registration.
6. How often do I need to register?
For public computing systems, network registration occurs automatically upon login.
For departmental computing systems that use Windows/Mac OS X, you will need to register a device when it is initially connected to the network and will be prompted to re-register the system annually.
For departmental computing systems that use Unix/Linux, you will need to complete web registration once per month.
Departmental (non-public) Users
1. How often do I need to re-register with network registration?
If you have a Mac or PC with the Policy Key software agent installed, you will need to register your computer annually. If you have a Unix/Linux system, you will need to register your computer once per month.
2. What is Safe•Connect and why is it being used?
Safe•Connect is the network registration product being utilized to provide wired network access to devices that comply with University of Rochester IT policy. University IT reserves the right to monitor systems necessary to protect the integrity, security, or functionality of campus-wide computing resources, when it is suspected that an account or system is engaged in unusual or excessive activity or it has good cause to believe that regulations, rules, or laws are being violated.
Safe•Connect will require users to register a system with a username and password before allowing them to use network services. When you register, the system records which network address you were assigned and how long you used it. Your username and password are your keys to the network; don't share them with anyone. You are responsible for all acts performed using your account, including copyright violations. If you are concerned that someone may be able to use your account, change your password immediately.
First and foremost, you must know your UR or URMC-SH Active Directory username and password. Your password should be kept secret. Do not ever write it down or share it with anyone. If you do not have this information, please contact the University IT Help Desk at 585-275-2000 or UnivITHelp@Rochester.edu.
Secondly, if your device is running a Microsoft Windows or Macintosh OS X operating system you will also need to install the Safe•Connect Policy Key software agent.
4. What operating systems does the Safe•Connect Policy Key software agent support?
Windows 2000, XP, Vista, 7, 8
Mac OS X 10.5 - 10.8
Linux, Unix, and older versions of Windows and Mac OS are supported via a manual registration process.
5. How do I get and install the Safe•Connect Policy Key software agent?
View setup information for Windows.
View setup information for Mac.
View setup information for Linux/Unix.
Printers and other devices
Please contact University IT at 585-275-2000 if a new printer or other network device is being added to the network.
6. Do I have to use the Safe•Connect Policy Key software agent?
Yes, the Safe•Connect Policy Key software agent is required for all Windows PCs and Mac computers in order to gain network access and ensure a safe computing environment.
You can uninstall the Safe•Connect Policy Key software agent at any time; however within minutes you will then be unable to access the Internet through the University of Rochester wired network. You will be required to reinstall the Policy Key software agent as if you are a new user in order to gain Internet access.
7. How do I know the Safe•Connect Policy Key software agent is running?
On Windows computers, you can right-click any blank space on the task bar at the bottom of your screen and select the option "Task Manager". When the Windows Task Manager appears, click the "Processes" tab and then click on the "Show processes from all users" button in the lower left, if there is one. Look for the processes "SCClient.exe" and "scManager.sys," both should be present.
Mac OS users can open the Activity Monitor located in the Utilities folder. From the Activity Monitor, look for the processes "SafeConnect" and "scManagerD," both should be present. If you have only recently installed the Macintosh Policy Key software agent, both processes may be called Safe•Connect.
If these small applications are uninstalled or disabled, the system will disallow network access until you re-register and reinstall Safe•Connect.
8. What are the things Safe•Connect checks for?
For Windows and Mac OS systems, Safe•Connect ensures the system has been registered and the Policy Key software agent is installed and running.
For Unix and Linux systems Safe•Connect ensures the system has been registered.
Your privacy is important to us. Safe•Connect maintains a record of:
- MAC address
- IP address
- UR or URMC-SH Active Directory username
- Operating system
The Policy Key software agent software application can be easily removed when one no longer needs to connect to University of Rochester wired networks.
Impulse Point, the company that created the Safe•Connect product, has released a privacy statement that is available for download in PDF format here: Safe•Connect Privacy Statement.
10. Does Safe•Connect track how I use my computer?
No, Safe•Connect tracks only your network registration.
11. Will I receive a notice if Safe•Connect is changed to implement other features?
If University policy is changed to make more detailed inspections of registered systems, University IT will provide advanced notice before implementation.
12. Where do I get help with a warning message I received from Safe•Connect?
If you would like details about a warning screen you have received, call 585-275-2000 for personal assistance.
13. How do I uninstall the Safe•Connect Policy Key software agent?
On Macintosh
Open the Applications folder and double-click the application 'Uninstall SafeConnect.' Click OK and enter your MAC OS X admin credentials when prompted.
On Windows 2000 & XP
Open the Control Panel and choose Add and Remove Programs. Find SafeConnect in the list and choose Uninstall.
On Windows Vista, 7 & 8
Open the Control Panel and choose Programs and Features. Find SafeConnect in the list and choose Uninstall.
14. What if a device is not capable of user registration?
Devices not capable of user registration may be added to an "open access" policy. Note that such devices may be reconfigured to use a private IP address. Departmental system/network Administrators can contact University IT at 585-275-2000 in the event a device is incapable of registering.
15. Can printers have public IP addresses?
Best practice would see printers with private or internal IP addresses, which do not require network registration. If business needs call for the printer to have a public IP address, the public IP can be moved to an open access policy. Departmental system/network administrators can contact University IT at 585-275-2000 to have an IP moved to an open access policy.
16. Known Issues with Safe•Connect
Unable to Install Policy Key software agent on Mac OS X 10.4 or lower:
The Safe•Connect Policy Key software agent cannot be installed on computers running OS X 10.4 or lower. University IT recommends that faculty and staff request a computer upgrade of their college-owned machines and that students, if possible, upgrade their own machines to OS X 10.5 or above. If for some reason you cannot upgrade your computer to 10.5 or above, please contact 585-275-2000 for further assistance.
Blackboard Loads Instead of My Homepage:
Occasionally, and each time you need to authenticate, you will be redirected to Blackboard instead of your homepage when opening a web browser. However, you should still be able to browse the web uninterrupted.
I browsed for a few minutes and then was asked to authenticate. Why is this?:
Safe•Connect may not catch your computer immediately after turning it on. Rather, it may catch your computer and ask for registration after traffic has passed across the network. If you find yourself unable to continue browsing simply open a browser and register.
Why am I being prompted to re-install the Safe•Connect Policy Key software agent?
You are asked to re-install the Safe•Connect Policy Key software agent if the network registration system is unable to detect that the Safe•Connect Policy Key software agent is properly running. This may happen for one of the following reasons:
- You are using a laptop and are utilizing a wireless connection at the same time as a wired connection. The Safe•Connect Policy Key software agent can improperly communicate if multiple network connections are live simultaneously. Turn off your wireless before you connect to a wired network. The vendor plans to release a fix for this in Q3 2013.
- You have an alternate configuration setup in your network profile. The recommendation is to only have one configuration within your network profile.
- You have an improper DNS server within your network settings.
- The time of your computer is off by more then 30 minutes or the date is wrong altogether.
- Your computer has a virus or malware that is interfering with your network connection.
- A personal firewall on your computer is blocking communication between the Safe•Connect Policy Key software agent and the network registration system.
17. Will I have access to my department's network?
You will have access to the local network wherever you connect your computer. If you do not register, you will not be allowed outside of your local network.
Public Computing Users
1. What determines the level of access I have?
Based on authentication credentials, individuals have access to all University network resources, or are routed to an external network with limited network resources.
2. What information does NetReg capture about me?
network registration captures UR Active Directory username and session information. For example, it does capture the login/start date and time as well as the logoff/end date and time, your UR Active Directory username, the hardware (MAC) address of the network card in your system, and the IP address used. This information is used for "forensic" reasons in logs that University IT Security & Policy may need to investigate abuse or illegal activities as the result of a Court Order.
3. I need access to a website that is blocked but shouldn't be?
Contact 585-275-2000 or go to the IT Center to discuss the web site. The IT Center staff has the ability to provide access if deemed allowable.
4. Why can't I go to certain sites while logged in as a Public user?
Public users have access to all .gov, .edu, .mil, .museum, .org and some .com sites (google.com). Public users do not have access to most .com sites. If you need additional .com access, please apply for a Visitor ID.
5. How do I obtain a Visitor ID?
Click on the desktop icon "Obtain Visitor ID" and follow the on-screen directions
6. Why can't I go to certain sites while logged in as a Visitor?
Visitor can visit most web sites. Access is denied for pornographic and identified malicious sites.
7. I have obtained a Visitor ID, but why can't I get to .com sites?
Most likely, you are still logged in as a Public user. Log out of the computer and then login with your new Visitor ID and password
8. Why can't I login with my Guest NetID to public computers?
Guest NetID's will not allow you to authenticate into public machines. You must use Public or Visitor ID's.
9. Why can't I login to public machines? I can login to my personal machine and my NetID works.
Go to https://myIdentity.Rochester.edu and follow the web page directions.
10. Do I need to get a Username and Password to access public computers?
No – you can use username Public and password Public to obtain limited Internet access
There is an internal document as well for the IT Center staff. It is available to their NetReg Clients in their knowledge base. If you have what you consider to be a "Frequently Asked Question" and do not see it here, please call 585-275-2000 or send the question in e-mail to UnivITHelp@rochester.edu.
Other connectivity resources are available at the "Getting Connected" location.