If you have been granted access to the AITS VPN, these instructions will allow you to set up the VPN connection on a non-university owned device. (This article is intended for employees supported by Client Services Support)
When connecting to the VPN: For your password, enter your password followed by a comma followed by pressing the Yubikey or typing the token's code.
Edit the VPN settings to not use the VPN credentials when authenticating to network servers. This setting is not exposed through Windows' UI, so you need to locate the .pbk file associated with your VPN connection (%AppData%\Roaming\Microsoft\Network\Connections\PBK\rasphone.pbk for user VPNs) or (%ProgramData%\Microsoft\Network\Connections\Pbk\rasphone.pbk for system VPNs).
1. Right click on the VPN's .pbk file and open it with Notepad. (Remember to untick 'Always use this program for this file type')
2. Find the profile for the connection you are configuring to use with the Token
3. Roughly 5 lines down will be an entry 'UseRasCredentials=1'
4. Change this to 'UseRasCredentials=0'
5. Save the file.
Optional:
Update the registry to allow 60 seconds for password entry (default is 30)
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\PPP\MaxConfigure=60