This site requires JavaScript to be enabled

How to install Fermilab CA certificates on Linux

79 views

3.0 - Updated on 2021-02-12 by Carlos Salazar (Inactive)

2.0 - Updated on 2020-11-03 by Fang Wang

1.0 - Authored on 2018-11-26 by Marcia Teckenbrock

How to install Fermilab CA certificates on Linux

 

Intended for:

Users who need to install Fermilab Certificate Authority (CA) certificates on their Linux machines. The Fermilab Root CA certificate will be required for VPN use. Other applications may require other Fermilab CA certificates.  

 


Scenario/Use case:

User needs to install Fermilab CA certificates so they can use VPN or other applications on their Linux machines.  

 


Instructions:


1. To test whether you need to install the Fermilab root CA certificate, point your Firefox browser to https://vpntest.fnal.gov. If you see the error below, you do not have the certificate. Proceed with the remaining instructions.


 
2. At https://authentication.fnal.gov/certs, next to Root CA, find the PEM link.
 Click to save files Fermilab_Root_CA.pem. Repeat the step for FERMI CA.

 Certificate download page

3.  In the top-right corner of the main Firefox browser window, select Preferences from the hamburger menu button.



4. Select Privacy & Security from the left-hand menu, then scroll all the way down to the bottom of the page and click View Certificates...



5. Select Authorities, then click Import...



 
6. Browse to the "Downloads" folder (or wherever you may have saved the certificate), highlight the "Fermilab_Root_CA" certificate, then click Open


7. Check the box next to Trust this CA to identify websites., then click OK.

 

Repeat steps 6 and 7 for Fermilab Sub CA certificate.

You should now see the certificates displayed in the Certificate Manager.



8. Restart Firefox and navigate to https://vpntest.fnal.gov. The VPN login page should now display without any warnings.


VPN log in page using Services account

 


See Also:

 

Fermilab CA certificates – what they are and why you need them

How to install Fermilab CA certificates on mobile devices iOS & Android