Access Keys:
Skip to content (Access Key - 0)

Authenticating to GlobalProtect using Certificates on macOS


During the early stages of the GlobalProtect (GP) VPN Beta users may not have been able to authenticate using their MIT Certificates. This article will outline how to manually edit your personal certificate in Keychain to resolve that issue.

The following directions may not resolve issues on macOS 11.x.y, also known as Big Sur. We will look to find a resolution and update this article.


Please have updated Certificates using CertAid prior to continuing: CertAid 2.2.6 for MacOS


When attempting to connect to GP using your certificates you will be met with this error.


  1. Search for Keychain on Spotlight, and click on the icon to open it
  2. On the left-hand side, click on login and My Certificates
  3. Single-click on your certificate, make sure it states Issued by: Massachusetts Institute of Technology
  4. On the menu bar at the top of the screen, select File > New Identity Preference
  5. Enter below as typed

    Note: macOS 12 (Monterey) or later requires the location be entered as a wildcard domain.


  6. Quit the Keychain Access app


  1. Click on GP icon on the task-bar, click Connect
  2. Click on Use Certificate, this should prompt macOS to request your local password, once typed click Always Allow

    Result: You should now be connected to GP VPN.

IS&T Contributions

Documentation and information provided by IS&T staff members

Last Modified:

September 28, 2023

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
globalprotect globalprotect Delete
macos macos Delete
certificate certificate Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
This product/service is:
Easy to use
Difficult to use

This article is:
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki