FAQs
🔽 Keep Scrolling For More Information
FAQs
There are 2 (and possibly 3) ways to use MFA, when it's active. Choose one or all.
1. Use a Yubikey
This option is ideal for non-smartphone users.
A Yubikey is a USB device (see images below) that generates your MFA number with a press of the button.
They cost $50. To get one, please email jbei-help@lbl.gov requesting a Yubikey.
Please provide a Project ID to charge.
Specify if you'd like a regular USB type device or USB-C, and if you want a regular sized or nano sized one (see image below).
We'll then work with you to link it to your account. There are 2 (and possibly 3) ways to use MFA, when it's active. Choose one or all.
2. Use your Smartphone (yes, it's okay to use your personal cellphone):
Step 1:
Configure it: https://identity.lbl.gov/mfa/
Click on Add LBL Token.
Select your Phone number and follow the steps.
A QR Barcode will present itself to scan with your phone.
Step 2:
On your smartphone, install Google Authenticator from the Google Play store:
Scan the QR Barcode from Step 1 when asked.
Full details here:
Guide to activating emergency bypass MFA if you cannot authenticate with MFA, most commonly due to:
Lost your phone
Lost the MFA token
Phone got reset
Got a new phone
MFA token no longer works (out-of-sync) Emergency MFA bypass is to be used infrequently for emergency situations only. This is not to be used on a regular basis to avoid MFA.
The following outlines the options if you have lost your phone or Yubikey and are unable to access an MFA token.
The IT Help Desk can assist you from 8:00AM to 5:00PM, Monday through Friday.
Contact the IT Help Desk at x4357, 510-486-4357, help@lbl.gov or https://help.lbl.gov
The IT Help Desk will walk you through using the MFA bypass application.
If you have access to the personal email address you setup for password recovery you can use the MFA bypass application.
MFA bypass application: https://identity.lbl.gov/bypass/
TOSHIBA e-STUDIO451C : IP Address:131.243.124.11
TOSHIBA e-STUDIO4505AC : IP Address: 131.243.44.48
HP Color LaserJet M553: IP Address: 131.243.44.56
HP LaserJet M402dn Black & White: IP Address: 131.243.44.12
TOSHIBA e-STUDIO3505AC : IP Address: 131.243.44.71
TOSHIBA e-STUDIO3555C : IP Address: 131.243.44.69
HP Color LaserJet M553: IP Address: 131.243.44.59
HP LaserJet M402dn Black & White: IP Address: 131.243.44.57
Install the Cisco VPN Client at software.lbl.gov.
If you have Cisco VPN client already, you should install the profile:
For Apple systems, move the lbl-ssl file to the correct path: /opt/cisco/anyconnect/profile/
You can also just try entering: mfavpn.lbl.gov as the server to connect to.
Authenticate with your Berkeley Identity or LDAP username and pass.
Reminder: Please disconnect when you are done using the Lab Network.
LBL requires multi-factor authentication to access the VPN. You should switch well before that date to the new MFA VPN by visiting mfavpn.lbl.gov with your AnyConnect VPN client.
You may no longer need to use the VPN at all. Many services that used to require it, especially business systems like eBuy, FMS, and BAR, can now be used without it. Try to reach them without VPN or ask the system's owner about this.
Are you having trouble using the new vpn? contact help@lbl.gov for help so we can get you working with the new system before the old one is switched off.
Web Application Requirements
lbnl-visitor:
The password changes every week.
The weekly passphrase is also posted at the front lobby & every conference room.
lbnl-employee:
lbnl-jbei-employee requires an LBNL LDAP credential to connect. Click on the links below for how-to guides:
Select LBNL-Employee wifi
Sign in with your LDAP lab credentials (the same credentials used to login to your LBL gmail, LETS, eBuy).
Requires a configuration profile to connect to the LBNL-employee wifi
Install the Wireless-Profile, select employee-wifi, enter your LDAP/Lab credentials
eduroam:
Click here for instructions on how to connect to eduroam.
If you are a lab employee with an @lbl.gov email address, then you have a Pro or Licensed Zoom account which allows you to host meetings with unlimited minutes for up to 300 participants.
Here are points to ensure you are logged in with your non-basic Zoom account:
Sign in either through the LBL Zoom website or the Zoom app with SSO.
Zoom App: https://zoom.us/support/download:
In the app login screen, Sign In with SSO (not Google):
Enter "lbnl" as the domain for lbnl.zoom.us
You will get redirected to the familiar LBL login page via browser.
Creating a Zoom account at zoom.us with your LBL email address gives you only a basic account not tied to the lab.
When you've logged in properly:
Profile will show it's a Licensed or Pro version.
The account profile will show the name Luis Corrales, our IT supervisor for Collaboration Services, and the person handling Zoom license agreements.
You can now schedule and host Zoom meetings with unlimited minutes.
Microsoft Teams:
To join a Microsoft Teams meeting from a Zoom Room, add the Teams meeting invitation link to the location field in the Zoom Room calendar reservation.