Method 1: Cert VPN

In the lower right corner of your screen, look for the blue shield icon.  You might have to click the ^ icon first to find it. When you hover your mouse over it, it should say FortiClient and a version number.

Click on the shield. 

You should see Connect to "IUPAT Cert VPN" listed.  

Click on Connect to "IUPAT Cert VPN". If you have previously connected you shouldn't have to do anything else, you will just see a message that you are connected. If it does not connect automatically, it is possible that it is not choosing the correct certificate for you. 

(If Connection Fails) Choose Certificate

Click on the FortiClient shield icon again, but this time choose "Open FortiClient Console". When the console opens, click "Remote Access" on the right and choose the IUPAT Cert VPN in the VPN Name dropdown. Verify that the Client Certificate is showing your name and "iupat-CA02-CA", if not select it and click Connect.

If the connection still fails you can try rebooting your machine or move to method 2 below.

Method 2: Password and Duo VPN

Click on the FortiClient shield icon as above, but this time choose "IUPAT VPN".

The FortiClient console will open; you should see the VPN logon screen.  If you see anything else, click on Remote Access on the left side.

Type your username and your password.  This is the same password you use to log in to your computer.

Click Connect.  You will need to respond to the Duo push on your mobile device.

When connected, you will see the following pop-up in the lower right corner of your screen: