It is strongly recommended not to run any other VPN clients at the same time!

Step 1: Download Cisco AnyConnect-Client

Please download the Cisco AnyConnect client from our download portal (login required) and then return to this guide:  Cisco AnyConnect Download

Step 2: Download, installation and selection of programs

Mount the DMG file as a drive (double-click on the file downloaded in step 1) and start the installation.

During installation, make sure that you only(!) select the "VPN" package and deselect all other modules (see picture). You do not need the modules "Web Security", "AMP Enabler" and the others.

If you are asked about an expired certificate, please continue.

Choose the application to install


If the VPN module cannot be selected here, help is available on the following page:
Uninstall Cisco Anyconnect
After that you can install the program correctly.

Possible messages

Depending on the macOS you are using, you may see messages like this about required permissions.
Please follow these instructions.

Message about possible required permissions - Screenshot © HTW Berlin

Step 3: Complete the installation

Perform the installation. After the completion of the installation you can delete the dmg file.

Installtion successfull

Step 4: Start CiscoAny Connect

Start the VPN program via the Finder in the directory "Programs → Cisco" the "Cisco AnyConnect Secure Mobility Client".

Start AnyConnect

Step 5: Establish connection

At the first start you have to enter and then click "Connect".  The server setting ( will be displayed as SSL-VPNCL-HTW on future starts.

Step 6: Enter login information

Please enter your HTW account data now. Please do not forget to add the extension "" to your user name (e.g. Confirm the entry with "OK".

Two connection profiles (Group) are available for the use of the VPN service:

HTW-SSL-Split (Standard)
Only requests that are directed to the university network of the HTW (e.g. services of your department) are routed through the VPN tunnel. Inquiries to external providers (e.g. the call of are still made via the home internet provider.

All Internet traffic is routed through the university's VPN server. This means that you use one IP address of the university (141.45.*.*) during the entire connection process. This is required for all those services of the HTW that additionally access an external service provider (e.g. external websites of the library, eBooks).

When do I need the profile "HTW-SSL-VPNCL-Full"?

Please use the "HTW-SSL-VPNCL-Full" profile if you want to access external databases of the library (eBooks), SAP software or other external services made available by the HTW.

Step 7: Connection established

While connected, the Cisco AnyConnect icon is displayed with a lock in the Dock and in the status bar.