ITS and UVa logos for printed output

NetBadge at UVA

NetBadge FAQs

Frequently Asked Questions (FAQs) about NetBadge

Following is a list of common questions about NetBadge, including what it is and how it works:

Answers to Frequently Asked Questions about NetBadge

About the NetBadge Service

What’s a NetBadge, and how do I get one?

A NetBadge is an electronic identification “badge” that is issued to your Web browser when you log into UVA’s NetBadge service. Many UVA websites and resources are protected by NetBadge, so whenever you visit one of these websites, your browser automatically presents your NetBadge to verify your identify as authorized for the protected UVA website.

If you visit a protected website and your browser does not have a NetBadge yet, you are automatically redirected to the NetBadge login page. After you log into NetBadge with either your personal digital certificate or your UVA computing ID and password, your browser returns you to the protected website you were originally attempting to access, presenting your NetBadge to identify you.

You can also log into NetBadge directly via the NetBadge login page.

What is normal NetBadge behavior?
If you you visit a NetBadge-protected application and it first requires you to log into NetBadge before allowing you to continue, here's what should happen:
  1. The original application or resource you were seeking sends your Web browser a granting request cookie and redirects you to the NetBadge login page.
  2. Your browser presents the granting request to NetBadge, and you log into NetBadge.
  3. Then NetBadge gives you a login cookie and sends you back to the original application or resource, using the information in the granting request cookie.
You may now continue with accessing your NetBadge-protected resource or application.
How long is my NetBadge valid?

If you log in from inside the UVA network (if you are on Grounds or using the UVA Anywhere VPN), then your NetBadge is valid for 9 hours. If you log in from outside the UVA network, then your NetBadge lasts 1 hour.

If you explicitly log out of NetBadge, the time limits above reset with your next NetBadge session.

Note: If you have already logged into NetBadge recently and your NetBadge session is still active, if you visit the NetBadge login page again, you will see information about the status of your existing NetBadge session, such as how much longer it is valid.

What happens if I try to access a protected site after my NetBadge expires?
That’s not a problem. If your NetBadge has expired, then your browser is automatically redirected to the login page, where you can log in again to obtain a new NetBadge.

Logging Into NetBadge

How do I log into NetBadge? What is the difference between the two login options?
You may log into NetBadge using either the personal digital certificate login option (a faster, more secure method), or by typing in your UVA computing ID and password. To use your personal digital certificate, click the red Log in button near the top of the NetBadge login screen. Otherwise, type your UVA computing ID and password in the labeled boxes on the NetBadge login screen (Forgot your password? Reset it.)
How do I change or retrieve my NetBadge password?

Reset the password you use for NetBadge »

Note that NetBadge is not a UVA computing account in itself; therefore it does not have its own password. Instead, it accepts your UVA computing ID and password. Health System employees may also use their HSCS credentials.

What is the personal digital certificate login option? Why is it more secure?

A digital certificate is like an ID card you can use to identify yourself to websites, including NetBadge. Logging into NetBadge with the digital certificate option is more secure than using your UVA computing ID and password because it reduces the chances you fall for a NetBadge phishing scam — a false website designed by criminals to look like NetBadge but that really steals your login credentials.

To check that the NetBadge screen you see is real:
The real URL for UVA's NetBadge service

  1. Look at the NetBadge URL in the top of your Web browser. The address should match the one pictured above, meaning it should:
    1. include an s (as in https), and
    2. match this URL exactly:
  2. If you notice any discrepancy from the official NetBadge URL, do not continue. This is the only URL you should trust. Accept no imitations, as they may indicate a phishing scam targeting members of the UVA community!
  3. Email to let them know if you suspect a scam.

Logging in with a digital certificate also requires less typing, so it’s faster!

Not sure whether you have a digital certificate? You probably do; nearly all students, faculty, and staff who have connected to UVA's wireless network or the UVA Anywhere Cisco VPN have one. But to learn more or find out how to get one, see Personal Digital Certificates at UVA.

Why is NetBadge asking for more personal information from me?
If, after logging into “regular” NetBadge, you are presented with an additional NetBadge login screen, then you are attempting to access an application or resource that requires an even higher level of security. “Enhanced” NetBadge is a higher-security edition of NetBadge that looks slightly different from the “original” NetBadge and offers increased protection of sensitive personal data. Some additional personal information is required to log into Enhanced NetBadge.

Troubleshooting NetBadge Problems

I keep getting thrown back to the NetBadge status page instead of the application I was trying to access, in an endless loop. Why is this happening?
The status page shows how much time is left on your current NetBadge and shows a list of your most recent logins. If you are seeing this page instead of being sent back to the original application or resource you were trying to access (that sent you to NetBadge in the first place), then:
  • Your Web browser probably didn’t present the granting request cookie to the login page, so it did not know where to send you back.
    • Solution: Check your browser’s security, privacy, and cookie settings. Some privacy and cookie settings cause your browser to present a cookie only to the same site that issued it. This will break NetBadge. On most browsers the default security, privacy, and cookie settings work properly. Try to return to the default settings if possible.
    • Solution: Check that you haven't mistakenly bookmarked the NetBadge login page instead of the Web application itself.
  • You may have accidentally messed up your initial login attempt (e.g., you mistyped your password or attempted to use an expired digital certificate to log in). If so, NetBadge may “forget” the destination you were initially trying to reach, so once you finally do log in successfully, it no longer knows where to send you, so it just sends you to the Status page, with information about how much longer your NetBadge session is valid.
    • Solution: Simply re-type the URL of your actual intended destination, or go back and follow the original link you used. You should be now be able to successfully connect to the NetBadge-protected UVA system or resource.
NetBadge isn’t working for me. What's the problem?
When you’re troubleshooting a NetBadge problem, remember these common fixes:
  • Changing the way your browser handles cookies: If you have configured your browser to disable cookies, NetBadge has no way of knowing what website you were attempting to access that sent you to NetBadge, or how to get you back to it once you’ve logged in and gotten your NetBadge. If you configure your browser to present a cookie only to the same site that issued it, or to block cookies that come from UVA, that also breaks NetBadge. The solution is to restore your browser’s cookie-handling configuration back to its default state.
  • Content Advisor in Internet Explorer: Content Advisor in some versions of the Internet Explorer Web browser interferes with the fundamental operating mechanism of NetBadge. In order to make NetBadge work, you will need to disable Content Advisor.
  • Enabling Javascript: Javascript must be enabled for NetBadge to work properly. If you have Javascript disabled, you are likely not getting to websites other than NetBadge, either.
After I log in with my digital certificate, I get a strange warning.
If you attempt to log in using your UVA digital certificate (a faster, more secure login method than typing your computing ID and password), you may see a rather mysterious error or warning. This happens with some Web browsers when you do not have a certificate loaded, or your certificate was stored in a place your Web browser cannot find, or your certificate has expired, or your certificate was not issued by UVA.
  • Solution: Download a fresh digital certificate. ITS’s Network Setup Tool can obtain and install a UVA Standard Assurance digital certificate for you and fine-tune your settings, which may fix the problem. Also, if your digital certificate is older than one year, it may have expired, but the Tool will get you a new one automatically.
  • Alternate Solution: Try logging into NetBadge using a different Web browser. For example, if you were using Firefox, try Internet Explorer (on a PC) or Safari (on a Mac).
  • One Other Solution: Log in with your username and password instead. Be sure to click the correct Log In button and do not use the Enter key.
How do I securely log out of NetBadge?

Completely logging out of NetBadge is important: if you have a Web browser open with your NetBadge loaded, and you leave your computer unattended, anyone else can simply sit down at your computer and use your browser to view personal information about you or perform electronic transactions using your identity!

The best way is to exit your Web browser completely. Your browser saves your NetBadge in memory and automatically presents it whenever necessary. Completely exiting your browser destroys the NetBadge. To find out more about logging out of NetBadge, including what to do if for some reason you are unable to exit your browser completely, see How to Log Out.

For Web Developers

How does NetBadge work “under the hood?”
To learn about the inner workings of the NetBadge service, visit How NetBadge Works or see the next FAQ.
How do I implement NetBadge for my site?

See our NetBadge info for Apache/UNIX Developers and NetBadge info for IIS/Windows Developers who wish to implement NetBadge or Enhanced NetBadge to protect their University applications, systems, or resources.

  Page Updated: Wednesday 2018-06-27 17:22:20 EDT