How to install Fermilab CA certificates on Linux

Intended for:

Users who need to install Fermilab Certificate Authority (CA) certificates on their Linux machines. The Fermilab Root CA certificate will be required for VPN use. Other applications may require other Fermilab CA certificates.  

Scenario/Use case:

User needs to install Fermilab CA certificates so they can use VPN or other applications on their Linux machines.  

Instructions:

1. To test whether you need to install the Fermilab root CA certificate, point your Firefox browser to https://vpntest.fnal.gov. If you see the error below, you do not have the certificate. Proceed with the remaining instructions.


 
2. At https://authentication.fnal.gov/certs, next to Root CA, find the PEM link.
 Click to save files Fermilab_Root_CA.pem. Repeat the step for FERMI CA.

 

3.  In the top-right corner of the main Firefox browser window, select Preferences from the hamburger menu button.

4. Select Privacy & Security from the left-hand menu, then scroll all the way down to the bottom of the page and click View Certificates...

5. Select Authorities, then click Import...

 
6. Browse to the "Downloads" folder (or wherever you may have saved the certificate), highlight the "Fermilab_Root_CA" certificate, then click Open. 

7. Check the box next to Trust this CA to identify websites., then click OK.

Repeat steps 6 and 7 for Fermilab Sub CA certificate.

You should now see the certificates displayed in the Certificate Manager.

8. Restart Firefox and navigate to https://vpntest.fnal.gov. The VPN login page should now display without any warnings.

See Also:

Fermilab CA certificates – what they are and why you need them

How to install Fermilab CA certificates on mobile devices iOS & Android