Heartbleed/OpenSSL Vulnerability - More Info

April 11, 2014

This is a follow up to our email regarding the recent OpenSSL vulnerability (also known as Heartbleed). This is a very serious vulnerability that allows encrypted information to be stolen, along with the keys to decrypt it.

 

Due to the nature of this vulnerability, we recommend changing your LawKey and PennKey passwords immediately.

Unfortunately, this change isn’t that simple because many services (such as printers, email, and WiFi) rely on your LawKey and PennKey passwords.  After changing your LawKey, you will need to update any device that connects to your email account or network printers. 

Reconfiguring Email Accounts on Smartphones

For iOS devices:

  1. Open settings
  2. Tap “Mail, Contacts, Calendars”
  3. Choose your Law School email from the accounts listed, usually titled “Exchange”
  4. Find the password field and update the password to your new one

For Android:

(NOTE: There are many different combinations of hardware and version of the Android operating system, so your specific screens and steps may be somewhat different than the ones referenced here. However, the general procedure should be similar)

  1. Go to “System Settings”
  2. Scroll down to the “Accounts” section, then tap “Corporate” (on some systems this is called “Corporate Sync”)
  3. Tap “Account Settings”
  4. Tap the Law School Exchange account
  5. Scroll down to the “Server Settings” section and tap “Incoming Settings”
  6. Update the password field
  7. Tap “Done”
  8. Sync the account to make sure the password works

Reconfiguring Network Printers 

If you are having issues connecting to network printers, please log off and restart your computer.  And if the problem persists after restarting, please email itshelp@law.upenn.edu.

Reconfiguring WiFi

After updating your PennKey, you will need to reconnect to AirPennNet.  To set up AirPennNet:

  1. Connect to AirPennNet-Help
  2. Open your preferred web browser.  If a page does not automatically load, try to navigate to www.upenn.edu and you should be redirected to a University of Pennsylvania Networking Site.
  3. Check the box next to “I Accept the Policy” and click the “Start” button
  4. Depending on your device, either download the XpressConnect app and run it or follow the on screen prompts to connect to AirPennNet.

For a more detailed explanation, please see the University’s configuration documentation.

Other Online Services

If you are curious whether other online services that you use have been affected, this is a useful list of social media sites, banks, email accounts, stores and other services that have been affected and what they have done about it.

 

If you have any trouble changing your passwords or reconfiguring these services, please email itshelp@law.upenn.edu.

Contact

Systems Availability

  • Our online services may not be available during these maintenance periods.

    Regularly
    Fridays: 5pm-midnight
    2nd & 4th Tuesdays: 5pm-7pm

    Occasionally
    Tuesdays: 5am-7am
    Thursdays: 5pm-7pm

    Notices
    https://twitter.com/pennlawitsalert

image