What is SafeConnect and why is it being used?

SafeConnect is the network registration product used to provide wired network access to devices that comply with University of Rochester IT policy. University IT reserves the right to monitor systems necessary to protect the integrity, security, or functionality of campus-wide computing resources, when it is suspected that an account or system is engaged in unusual or excessive activity or it has good cause to believe that regulations, rules, or laws are being violated.

SafeConnect will require users to register a system with a username and password before allowing them to use network services. When you register, the system records which network address you were assigned and how long you used it.

Your username and password are your keys to the network; don’t share them with anyone. You are responsible for all acts performed using your account, including copyright violations. If you are concerned that someone may be able to use your account, change your password immediately.

Who is required to use network registration?

All individuals whose computers connect to University networks (except guest networks) must be registered. This includes networks in departments, the library, kiosks, classrooms, and labs.

What type of account do I need to use register?

A UR or URMC-SH Active Directory account is needed for wired network registration.

Are there any differences between my wired and wireless experience with network registration?

The wireless experience will depend on which wireless network you connect to.

  • UR_RC_InternalSecure uses NetID and requires web-based registration on each use.
  • UR_Connected uses a UR Active Directory account and supports automatic re-registration.

Network registration on the wired subnet will vary depending on the network segment.

  • Public computers in areas such as the IT Center, library, kiosks, and labs will require you to log in to the computer with your UR Active Directory account in order to use the computer. Registration occurs automatically at login.
  • Departmental computers will typically require an annual web-based registration process.
  • Computers that are bound to the UR domain and have the SafeConnect Policy Key software agent pre-installed will automatically complete the registration upon login.

How often do I need to register?

For public computing systems, network registration occurs automatically upon login.

For departmental computing systems that use Windows/Mac OS X, you will need to register a device when it is initially connected to the network and will be prompted to re-register the system annually. If you are on a system without the Policy Key software agent installed, you will need to register annually and each time your computer is off the UR network for over one week.

For departmental computing systems that use Unix/Linux, you will need to complete web registration once per month.

What happens if a device is not capable of user registration?

Devices not capable of user registration may be added to an “open access” policy. Note that such devices may be reconfigured to use a private IP address. Departmental system/network administrators can contact University IT at (585) 275-2000 in the event a device is incapable of registering.

Do I have to use the SafeConnect Policy Key software agent?

The SafeConnect Policy Key software agent is required for most Windows and Mac computers in order to gain network access and ensure a safe computing environment.

How do I install the Safe Connect software?

You can uninstall the SafeConnect Policy Key software agent at any time; however, within minutes, you will then be unable to access the Internet through the University’s wired network. You will be required to reinstall the Policy Key software agent as if you are a new user in order to gain Internet access.

I am receiving a certificate warning message in Outlook after registering. What should I do?

If your computer has not yet completed the network registration process and you try to access your email via an Outlook client, you will receive a certificate warning message related to impulse.com.

You will need to open a web browser, navigate to a non-rochester.edu website and authenticate with your credentials after your browser redirects you to the network registration web page.

What operating systems does the SafeConnect Policy Key support?

The SafeConnect Policy Key supports:

  • Windows Vista, 7, 8, 8.1
  • Mac OS X 10.5 – 10.9

Will I have access to my department's network if I do not register?

You will have access to the local network wherever you connect your computer. However, if you do not register, you will not be allowed outside of your local network.

How do I know the SafeConnect Policy Key software agent is running?

Windows

  1. Right-click any blank space on the task bar at the bottom of your screen
  2. Select Task Manager
  3. Click the Processes tab
  4. Click on the “Show processes from all users” button in the lower left
  5. Look for the processes “SCClient.exe” and “scManager.sys,” both should be present.

Mac

  1. Open the Activity Monitor located in the Utilities folder
  2. Look for the processes “SafeConnect” and “scManagerD,” both should be present.
  3. If you have only recently installed the Macintosh Policy Key software agent, both processes may be called Safe•Connect.

If these small applications are uninstalled or disabled, the system will disallow network access until you re-register and reinstall SafeConnect.

How much privacy do I have with SafeConnect?

Your privacy is important to us. SafeConnect maintains a record of:

  • MAC address
  • IP address
  • UR or URMC-SH Active Directory username
  • Operating system
  • Session information: login/start date and time and logoff/end date and time

SafeConnect will not track how you use your computer. Impulse Point, the company that created the SafeConnect product, has released a privacy statement that is available for download in PDF format.

Can printers with public IP addresses be registered and used?

Best practice would be to use printers with private or internal IP addresses, which do not require network registration. If business needs call for the printer to have a public IP address, the public IP can be moved to an open access policy. Departmental system/network administrators can contact University IT at (585) 275-2000 to have an IP moved to an open access policy.

Can I get access to a website that is blocked but should not be?

Contact the IT Help Desk at (585) 275-2000 or go to the IT Center to discuss the web site. The IT Center staff has the ability to provide access if deemed allowable.

Why am I being asked to re-install the SafeConnect software?

You may be asked to re-install the SafeConnect Policy Key software agent if the network registration system is unable to detect that the software agent is properly running. This may happen for one of the following reasons:

  • You are using a laptop and are utilizing a wireless connection at the same time as a wired connection.  The SafeConnect Policy Key software agent can improperly communicate if multiple network connections are live simultaneously. Turn off your wireless before you connect to a wired network. The vendor plans to release a fix for this at a later date.
  • You have an alternate configuration setup in your network profile. The recommendation is to only have one configuration within your network profile.
  • You have an improper DNS server within your network settings.
  • The time of your computer is off by more than 30 minutes or the date is wrong altogether.
  • Your computer has a virus or malware that is interfering with your network connection.
  • A personal firewall on your computer is blocking communication between the SafeConnect Policy Key software agent and the network registration system.

After completing registration, my web browser is loading Blackboard instead of my home page. What should I do?

Occasionally, and each time you need to authenticate, you will be redirected to Blackboard instead of your homepage when opening a web browser. However, you should still be able to browse the web uninterrupted and you can set your default home page again.

I am being asked to authenticate after browsing for a few minutes. Why is this?

SafeConnect may not catch your computer immediately after turning it on. Rather, it may catch your computer and ask for registration after traffic has passed across the network. If you find yourself unable to continue browsing, simply open a browser and register.

How do I uninstall the Safe Connect Policy Key software agent?

Mac

  1. Open the Applications folder and double-click the application Uninstall SafeConnect.
  2. Click OK and enter your MAC OS X admin credentials when prompted.

Windows Vista, 7 & 8

  1. Open the Control Panel and choose Programs and Features.
  2. Find SafeConnect in the list and choose Uninstall.

Windows 2000 & XP

  1. Open the Control Panel and choose Add and Remove Programs.
  2. Find SafeConnect in the list and choose Uninstall.