macOS Installation Instructions

Antivirus required to connect. Please click here for details.
SUPPORT NOTES
  • Do not use these manual installers on LLNL-managed computers; use Portal Manager or MacPatch instead.
  • GlobalProtect will launch your system default web browser to complete the authentication process.
GlobalProtect
GlobalProtect (Starting November 19th)
AnyConnect (Legacy Support)


Palo Alto Networks GlobalProtect Client

NOTE: The appearance and verbiage of the pictures below may change over time as we improve them for clarity/etc.
  1. You need to install this client as Administrator. Navigate to the folder where you saved the file and run as Administrator.
  2. Double-click on Mac software installation package (e.g., GlobalProtect-5.1.1.pkg).
  3. Click the "Continue" button.
    Mac Install Instructions
  4. Click "Continue" button.
    Mac Install Instructions
  5. Click the "Install" button.
    Mac Install Instructions
  6. Enter your computer credentials when prompted.
  7. Click the "Open Security Preferences" button.
    Mac Install Instructions
  8. Click the "Allow" button.
    Mac Install Instructions
  9. Make sure "Palo Alto Networks" box is checked and press the "OK" button.
    1. Depending upon your configuration you may get a window that indicates that you need to restart your computer. Click "OK" and continue with the installation
      2. Mac Install Instructions

  10. For macOS 10.15 only - Click the "Privacy" tab.
    1. Select "Full Disk Access" from the list on the left.
      1. If needed, click the padlock icon to unlock the pane.
    2. Click the plus sign (+) button.
    3. Browse to and select /Applications/GlobalProtect.app.
    4. If prompted to quit GlobalProtect, choose "Later".
      Mac Install Instructions
      Mac Install Instructions
  11. Click the "Close" button.
    Mac Install Instructions
  12. The "GlobalProtect" window (pictured below) may appear and disappear. We will come back to it later.
    1. Restart your computer.
      Mac Install Instructions
  13. To use the software, click the "Globe icon" in the menu bar.

    Mac Install Instructions


  14. In the GlobalProtect window, enter the LLNL VPN portal address: gpvpn.llnl.gov
    1. Click "Connect".
      Mac Install Instructions
  15. To log in, enter your OUN in the "Username" field and your OTP (PIN + token code) in the "Password" field.
    Mac Install Instructions
  16. If your computer connects successfully and you pass the antivirus software enforcement check, you should get a notification letting you know that you connected successfully. The following notification will appear:

    Mac Install Instructions

  17. If you do not pass the antivirus software enforcement check, you will not be able to reach any LLNL resources and will receive a pop-up window instructing you to remediate your computer and reconnect:

    Mac Install Instructions

  18. To disconnect the GlobalProtect VPN software, click the "Globe icon" in the Finder menu bar and click the "Disconnect" button.



GlobalProtect Client

NOTE: The appearance and verbiage of the pictures below may change over time as we improve them for clarity/etc.
  1. You need to install this client as Administrator. Navigate to the folder where you saved the file and run as Administrator.
  2. Double-click on Mac software installation package (e.g., GlobalProtect-5.1.1.pkg).
  3. Click the "Continue" button.
    Mac Install Instructions
  4. Click "Continue" button.
    Mac Install Instructions
  5. Click the "Install" button.
    Mac Install Instructions
  6. Enter your computer credentials when prompted.
  7. Click the "Open Security Preferences" button.
    Mac Install Instructions
  8. Click the "Allow" button.
    Mac Install Instructions
  9. Make sure "Palo Alto Networks" box is checked and press the "OK" button.
    1. Depending upon your configuration you may get a window that indicates that you need to restart your computer. Click "OK" and continue with the installation
      2. Mac Install Instructions

  10. For macOS 10.15 only - Click the "Privacy" tab.
    1. Select "Full Disk Access" from the list on the left.
      1. If needed, click the padlock icon to unlock the pane.
    2. Click the plus sign (+) button.
    3. Browse to and select /Applications/GlobalProtect.app.
    4. If prompted to quit GlobalProtect, choose "Later".
      Mac Install Instructions
      Mac Install Instructions
  11. Click the "Close" button.
    Mac Install Instructions
  12. The "GlobalProtect" window (pictured below) may appear and disappear. We will come back to it later.
    1. Restart your computer.
      Mac Install Instructions
  13. To use the software, click the "Globe icon" in the menu bar.

    Mac Install Instructions


  14. In the GlobalProtect window, enter the LLNL VPN portal address: gpvpn.llnl.gov
    1. Click "Connect".
      Mac Install Instructions
  15. A login window will now appear in your default web browser. Select whichever option is most convenient for you, and one that corresponds to a device you already have (i.e., don’t choose ‘DOE PIV Card’ if you don’t have one).
    • MyPass
    • DOE PIV Card (badge with embedded chip)
    • RSA (SecurID, also known at LLNL as the One-Time Password, or OTP)
    Mac Install Instructions
  16. If you choose RSA, enter your OUN in the Username field and your OTP (PIN + token code) in the Password field that appears on the next screen. Proceed to step 17.

    If you choose MyPass or PIV, you will be prompted to select the proper certificate:
    • For MyPass, choose the certificate with your official username somewhere in the subject.
    • For PIV, choose the certificate with your name in uppercase letters. It might also say ‘Affiliate.’
    NOTE: If you are using Firefox and not getting a prompt for a valid certificate, you may be able to resolve your issue by going to “Settings > Privacy & Security > Security > View Certificates… > Authentication Decisions” , select any value where the host contains the term “eidp” and Delete, then reload your browser/reboot and try again:
    A dialog box showing a list of certificates for a user to delete


  17. Once you authenticate successfully, your browser will display the following window: Mac Install Instructions
    Follow the instructions given and select “Open GlobalProtect” if you see a system dialog prompt (at which point you can choose to “Always Remember”) or click the “click here" link to launch the GlobalProtect client and complete the connection.

  18. If you do not pass the antivirus software enforcement check, you will not be able to reach any LLNL resources and will receive a pop-up window instructing you to remediate your computer and reconnect:

    Mac Install Instructions

  19. To disconnect the GlobalProtect VPN software, click the "Globe icon" in the Finder menu bar and click the "Disconnect" button.