Uphs Remote Access: Guide To Off-campus Connectivity

Accessing clinical applications, email, and shared drives from outside the hospital network requires navigating specific security protocols. When you're away from a physical workstation at the University of Pennsylvania Health System, the UPHS remote access portal bridges the gap, allowing authorized personnel to securely log in from personal or remote devices.

To establish a stable connection, you need to combine two core elements: multi-factor authentication through Duo Mobile and the appropriate virtual desktop infrastructure client, typically Citrix Workspace. Skipping a step or using an unsupported browser often results in connection loops or blocked application launches. This guide breaks down the exact prerequisites, setup steps, and troubleshooting techniques required to manage off-campus connectivity efficiently.

Prerequisites for Off-Campus Connection

Before logging into the portal, ensure your personal computer or mobile device meets the baseline software and security standards set by Penn Medicine IT. Attempting to connect without these tools will cause application launchers to fail.

• Duo Mobile Enrollment: Every remote session requires a secondary verification step. You must enroll your smartphone or tablet in Duo Mobile before attempting your first login.
• Citrix Workspace Client: Web browsers alone cannot render virtualized clinical applications like PennChart or shared network drives. You must download and install the native Citrix Workspace application for Windows or macOS prior to initiating a session. Chromebooks are generally unsupported for these specific virtual setups.
• Supported Browsers: Use updated versions of Google Chrome, Mozilla Firefox, or Microsoft Edge. Safari users often encounter plug-in restrictions unless content blockers and auto-play settings are explicitly configured to trust the portal domain.

Step-by-Step Connection Guide

Setting up your connection takes only a few minutes if you follow the proper sequence. Always navigate directly to the official portal rather than relying on unverified bookmarks that may point to outdated policy endpoints. As discussed in recent reports by Reuters, the implications are notable.

1. Open your browser and navigate to the official Penn Medicine Network Portal to verify guidelines or go straight to the secure Remote Access Portal.
2. Enter your assigned username and password credentials when prompted by the login screen.
3. Complete the multi-step verification prompt sent to your registered Duo Mobile device.
4. Select the appropriate resource category from the landing page, such as PennChart & Citrix Apps or Drives & Remote Access.
5. Click on the desired application. The browser will download a small .ica connection file to your local machine.
6. Click the downloaded .ica file at the bottom of your browser window to launch the application inside the local Citrix Workspace client.

For more details on university-wide network policies, you can review the University of Pennsylvania ISC Infrastructure.

Managing Shared Drives and Remote Desktops

Once authenticated through the portal, remote users often need access to local file repositories or their physical office workstations. Understanding how these virtual environments behave prevents common workflow friction.

Network drive access through the portal is entirely virtual. You cannot directly download massive institutional files onto an unmanaged personal hard drive, but you can securely open, edit, and save compatible document types within the session.

If application-level access isn't enough, employees can request Remote Desktop Protocol (RDP) connectivity to their specific office computer through the service desk. This requires having your physical work computer's exact device name on hand—usually found on a physical tag affixed to the office desktop tower. RDP sessions mirror your office desktop experience entirely, keeping sensitive data within the secure hospital perimeter.

Common Mistakes and Troubleshooting

Connectivity issues usually stem from cached browser data, missing client installations, or light-mode interface bugs.

• The Light Mode Trap: If clicking an application opens a raw HTML error page or fails to download an .ica file, your Citrix session is trapped in "light mode". To fix this, click your name in the upper right-hand corner of the portal dashboard and select the option to exit light mode or change the receiver settings.
• Blocked Plug-ins on Mac: Safari users frequently experience blocked execution if the browser security preferences restrict auto-play or plug-ins for the medical portal domain. Navigate to Safari settings, check the plug-in permissions, and ensure all Penn-related addresses are set to allow execution.
• Ignoring Dedicated Laptops: If you have been issued a dedicated Penn Medicine managed laptop, do not use the web-based portal for everyday tasks. Managed laptops should connect directly via the native VPN client shortcut found on the local desktop, providing a smoother, more native office experience.

To check broader health system updates or employee resources, consult the main Penn Medicine Employee Portal.

Frequently Asked Questions

Why won't my browser download the .ica file?

Browsers often block automatic file downloads from unfamiliar or security-heavy enterprise portals. Check your browser's address bar for a blocked download icon, or clear your cache and ensure pop-ups are allowed for the access domain.

Can I access UPHS remote resources from a Chromebook?

No. Chromebooks lack the architecture required to support the full native Citrix Workspace client needed to run heavy clinical software like PennChart remotely. You must use a standard Windows or macOS personal device.

What should I do if Duo Mobile isn't sending push notifications?

First, check your cellular or Wi-Fi data connection. If notifications still fail, open the Duo Mobile app manually on your phone to check for pending authentication requests, or use the passcode option generated inside the app.

How do I map my local printer to a remote session?

Citrix Workspace automatically maps local client printers by default. Ensure your printer drivers are up to date on your local personal machine before launching the remote application session.