FINAL NOTICE-Fermilab VPN Users: ACTION REQUIRED

FINAL NOTICE TO PREPARE FOR THE COMING CHANGE TO THE FERMILAB VPN SYSTEM

 

WHAT ARE WE DOING?

Computing will be making a necessary change to the site VPN system on Wednesday, May 1, between 7 a.m. and 8 a.m.

If you have not done so, you must load the “Fermilab Root CA” certificate on each device on which you use VPN. If you do not have a properly configured certificate, you will receive an error message once you attempt to log in to the VPN system beginning May 1. 

 

WHAT IS THE IMPACT TO YOU?

Once the change is made on May 1 between 7 and 8 a.m., any new VPN connection on any device will require a Fermilab Root CA certificate. To ensure that you are ready for this change, please read the instructions below carefully and take any actions required.

WHAT DO YOU NEED TO DO?

You must make sure that the “Fermilab Root CA” certificate is properly loaded and configured as trusted on each laptop/tablet/phone on which you use VPN.

If you have a centrally managed Windows or Mac computer, the certificate should be installed already. Test that the certificate is working by following the steps below:

  1. Start your anyConnect VPN application. (NOTE: If anyConnect connects to a previous destination automatically, you might have to cancel that session in order to proceed to Step 2.)
  2. Type vpntest.fnal.gov in the Connect field
  3. Click the Connect button.

If the certificate is installed correctly, you should NOT see any warnings about connecting to an untrusted site and you are ready for the change. Please continue to use the site VPN.FNAL.GOV as usual.

If you DO see a warning, or if you have a Linux machine or a non-centrally-managed device, follow the appropriate instructions for your device:

Windows computers: https://fermi.service-now.com/wp?id=kb_article&sys_id=KB0012906
Mac computers: https://fermi.service-now.com/wp?id=kb_article&sys_id=KB0012919
Mobile devices: https://fermi.service-now.com/wp?id=kb_article&sys_id=KB0012905
Linux computers: https://fermi.service-now.com/wp?id=kb_article&sys_id=KB0012914

For any issues, contact the Service Desk.

More information about multifactor authentication at Fermilab is available at https://mfa.fnal.gov (VPN required to access).