Intended for: Individuals who use VPN and other applications that require Fermilab CA certificates for authentication
Scenario/Use case:
Use VPN and other applications that require Fermilab CA certificates for authentication
Details:
Q: Why do I need to install the Fermilab CA certificates?
A: For security reasons, several network systems at Fermilab such as VoIP, VPN and some local websites require you to use the X.509 identity certificates issued by Fermilab CA(s). To do so, users must install and trust the Fermilab CA certificate(s) on their devices.
Q: How do I know whether I need to install the certificates?
A: All Fermilab centrally managed Windows and Mac computers should already have all Fermilab CA certificates installed. To verify, please visit https://vpntest.fnal.gov. You don’t need to type your credentials; just verify that you do not get a warning about connecting to an untrusted site. If you do see a warning, submit a Service Desk ticket.
For non-centrally managed computers, follow the instructions below.
- How to install Fermilab CA certificates on Windows computers: https://fermi.servicenowservices.com/kb_view.do?sysparm_article=KB0012906
- How to install Fermilab CA certificates on Mac computers: https://fermi.servicenowservices.com/kb_view.do?sysparm_article=KB0012919
- How to install Fermilab CA certificates on Linux computers: https://fermi.servicenowservices.com/kb_view.do?sysparm_article=KB0012914
- How to install Fermilab CA certificates on mobile devices (iOS & Android): https://fermi.servicenowservices.com/kb_view.do?sysparm_article=KB0012905