Installation Guides (MacOS)

• VPN for Mac
• Configure the network for VPN
• Problem after Active Directory (Windows/entra) Password change

VPN for Mac

For using VPN on Mac you have to install the Sophos Client Authentication Agent and the FortiClient! For both you need to Device to connect with LAN cable inhouse!

I'm not sure if the FortiClient needs the Sophos Client Authentication Agent! But for security reason we need the Sophos Endpoint Protection Software:

Sophos Endpoint Protection

1. Download zip-file from smb://vogelwarte.ch/dfs/ Teamwork/IT/SophosInstall.zip
2. Install the Sophos Installer.app
3. Follow this guide to enable all required permissions for Sophos: https://docs.sophos.com/central/customer/help/en-us/PeopleAndDevices/ProtectDevices/EndpointProtection/MacSecurityPermissions/index.html#grant-permissions-for-scanning-and-web-protection

FortiClientVPN Installation

1. Download the VPN client software: FortiClient Onlineinstaller / Updates.
2. Install it - Zertifikat should be automatically installed (or not needed)
3. You need to allow in the System Settings following entries:
4. Switch off all Inhouse Network LAN and also WLAN "Vogelwarte" or "VoWa_public"

FortiClient uninstall

The problem is that the Uninstaller is only working if FortNet is not running. You have to run the MacOS in the Safe Mode

Safe Mode procedure

1. Shutdown
2. Press Power Butten for long time till "System ..." appears
3. Press on "HardDrive" symbol
4. Press on Shift and then the "click"-button changes to "...start into Safe Mode..."
5. The system starts into the safe mode
6. Now you can run the "Uninstaller"
7. Reboot the machine

Configure the network for VPN

For various internal services, e.g. QGIS plugins, a standard domain vogelwarte.ch must be specified in the network settings.

1. Go to the Network details
2. Select DNS on the left side
3. In Search Domains add vogelwarte.ch. You have to press + on the bottom of the listbox.

Problem after Active Directory (Windows/entra) Password change

When I changed my ActiveDirectory password on the MacOS - everything worked. OK, I had to give the new password on serveral Online Services from Microsoft365 and I've to restart my Teams and so on... But one problem on MacOS keept me a little bit stocked.

The passwords on MacOS are stored in the Keychain Access Tool and is encrypted with the AD password and this is not changed automatically - so you have to change it manually:

Type into a Terminal:

security set-keychain-password

And you have to enter the old and then the new Active Directory Password.