Hardware reference guide

GlobalProtect Administrator’s Guide 21
Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication
Step 2 Install certificates in the personal
certificate store on the client systems.
If you are using unique user certificates or
machine certificates, each certificate must
be installed in the personal certificate
store on the client system prior to the first
portal/gateway connection. Install
machine certificates to the Local
Computer certificate store on Windows
and in the System Keychain on Mac OS.
Install user certificates to the Current
User certificate store on Windows and in
the Personal Keychain on Mac OS.
For example, to install a certificate on a Windows system using the
Microsoft Management Console:
1. From the command prompt, enter
mmc to launch the console.
2. Select
File > Add/Remove Snap-in.
3. Select
Certificates, click Add and then select one of the
following, depending on what type of certificate you are
importing:
•
Computer account— Select this option if you are importing
a machine certificate.
•
My user account— Select this option if you are importing a
user certificate.
4. Expand
Certificates and select Personal and then in the
Actions column select
Personal > More Actions > All Tasks >
Import
. and follow the steps in the Certificate Import Wizard to
import the PKCS file you got from the CA.
5. Browse to the .p12 certificate file to import (select
Personal
Information Exchange
as the file type to browse for) and enter
the
Password that you used to encrypt the private key. Select
Personal as the Certificate store.
Set Up Client Certificate Authentication (Continued)