This site requires JavaScript to be enabled
An updated version of this article is available

Fermilab CA certificates – what they are and why you need them

5 views

2.0 - Updated on 2023-01-20 by Fang Wang

1.0 - Authored on 2023-01-20 by Marcia Teckenbrock

Intended for: Individuals who use VPN and other applications that require Fermilab CA certificates for authentication

 


Scenario/Use case:

Use VPN other applications that require Fermilab CA certificates for authentication

 


Details:

Q: Why do I need to install the Fermilab CA certificates?

A:  For security reasons, several network systems at Fermilab such as VoIP, VPN and some local websites are or will soon require you to use the X.509 identity certificates issued by Fermilab CA(s). To do so, users must install and trust the Fermilab CA certificate(s) on their devices.

Q: How do I know whether I need to install the certificates?

A: All centrally managed Windows and Mac OS computers should already have all Fermilab CA certificates pre-loaded.  To verify, please visit https://vpntest.fnal.gov/.  You don’t need to type your credentials; just verify that you do not get a warning about connecting to an untrusted site. If you do see a warning, submit a Service Desk ticket.

For non-centrally managed computers, follow the instructions at the link below.