Installing and configuring the Root CA and Fermi CA certificates (for using VPN)

Intended for:

All VPN users who do not have centrally managed computers or other devices (i.e., your computer does not receive patches and updates from Fermilab).

Scenario/Use case:

Use VPN to access the lab network.

Instructions:

All VPN users must have both the Root CA and Fermi CA certificate properly installed and configured on every computer, tablet or phone on which VPN is used. (If you have a centrally managed Windows or Mac computer, these certificates should be installed already.)

Both certificates can be downloaded at https://authentication.fnal.gov/certs/.

If you need detailed instructions, follow the appropriate link for your device:

Windows computers: Click this link.

Mac computers: Click this link.

Mobile devices: Click this link or...

Linux computers: Click this link.

Once you have successfully installed and tested the new Fermilab CA root certificates, you may continue to use the current VPN.FNAL.GOV system as usual until the next steps in the migration process are announced (April-to-June 2019 timeframe).

See Also:

Multifactor authentication at Fermilab