Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Install Juniper Secure Connect on macOS

SUMMARY Learn about how to create rollout packages for Juniper Secure Connect application software and step-by-step procedures to install Juniper Secure Connect on macOS platform. If you want to install Juniper Secure Connect application, see Manual Installation of Juniper Secure Connect. If you are an administrator, see Create Rollout Packages for Juniper Secure Connect Installation section to prepare the installer for software rollout.

What's Next

Download the Juniper Secure Connect application software from here. See release notes for more details.

For more information on Juniper Secure Connect GUI elements, see Juniper Secure Connect GUI Elements.

For more information on Juniper Secure Connect features and how to configure the options, see Connection Menu, View Menu, Log Menu, and Help Menu.

Manual Installation of Juniper Secure Connect

Following are the steps to install the Juniper Secure Connect on your macOS machine.

  1. Run the Juniper Secure Connect installer (.dmg file). To start the installation, click on Juniper Secure Connect.pkg. See Figure 1.
    Figure 1: Juniper Secure Connect InstallerJuniper Secure Connect Installer
  2. A pop-up window appears as shown in Figure 2 with a message that a program will run to check whether Juniper Secure Connect application can be installed. Click Continue to run the program.
    Figure 2: Trusted Resource Verification Pop-up WindowTrusted Resource Verification Pop-up Window
  3. Juniper Secure Connect welcome page appears. See Figure 3. Click Continue.
    Figure 3: Installer Welcome WindowInstaller Welcome Window
  4. Juniper Secure Connect Software License Agreement page appears. See Figure 4.
    Figure 4: License Agreement WindowLicense Agreement Window

    Read the license agreement carefully. If you accept the terms, then select I accept the terms in the license agreement check box to accept the license agreement. Click Continue. See Figure 5.

    You can also save or print the software license agreement. To continue the installation, you must agree to the terms of the software license agreement and click Continue.

    Figure 5: Agree or Cancel License AgreementAgree or Cancel License Agreement
  5. The Advanced Options page appears. See Figure 6. Click Continue.
    Figure 6: Configure FIPS Mode OptionConfigure FIPS Mode Option
    Note:

    The SRX Series Firewall and the Juniper Secure Connect application are independent FIPS compliant products. For remote access VPN solution on FIPS evaluated SRX Series Firewall, see Juniper Secure Connect.
  6. In the Installation Type page, you can change the installation location if you wish. Verify that you have enough space on your system. Click Install to begin the installation process. See Figure 7.
    Figure 7: Start Juniper Secure Connect InstallationStart Juniper Secure Connect Installation

    A pop-up message as shown in Figure 8 is displayed to confirm restarting the computer when the installation is complete. Click Continue Installation to confirm restart.

    Figure 8: Confirm Restart after InstallationConfirm Restart after Installation
  7. Juniper Secure Connect installer runs the package scripts as shown in Figure 9.
    Figure 9: Running Juniper Secure Connect Installation PackageRunning Juniper Secure Connect Installation Package

    Figure 10 shows an example of the Juniper Secure Connect installation window when the installation is successfully completed.

    Figure 10: Juniper Secure Connect Installation CompletedJuniper Secure Connect Installation Completed

    Congratulations! The Juniper Secure Connect application is successfully installed in your Mac.

  8. To use the application, you must first restart your system.
  9. You can now launch the Juniper Secure Connect and enter the Gateway Address URL to connect with the SRX Series Firewall. Figure 11 shows an example to enter the gateway address to the SRX Series Firewall.

    You can also enter a fully qualified domain name (FQDN) in the Gateway Address URL to connect with the SRX Series Firewall. For example: https://vpn.juniper.net.

    After entering the gateway address, click the connection toggle button to establish connection manually to the destination system. You can also select Connection > Connect from the menu bar to manually establish a VPN connection. When the connection is established successfully, the application window minimizes in the task bar.

    Figure 11: Launch Juniper Secure Connect Launch Juniper Secure Connect

Custom Branding Option (macOS)

Juniper Secure Connect for macOS allows you to add your own logo or branding image. It also allows you to add HTML page for the branding image that would open when you click on the branding area in the Juniper Secure Connect. The HTML page is optional where you can provide any information you want. You should customise the installation package for branding your client. For detailed instructions, see Create Rollout Packages for Juniper Secure Connect Installation (macOS) .

Figure 12 is the sample screen, where the customizable branding area is highlighted:

Figure 12: Custom Branding Option (macOS)Custom Branding Option (macOS)

Create Rollout Packages for Juniper Secure Connect Installation

As a system administrator, you can also build your own rollout packages, if required. Building the rollout packages is an optional step. When you create rollout packages for Juniper Secure Connect application, you can install the application across the organization. Read the following steps to learn how you, as a system administrator can prepare the Juniper Secure Connect installer for the software rollout.

Juniper Secure Connect provides the installer for macOS as a disk image (.dmg) file. First you need to mount the package that is located inside the .dmg file. To do this, double-click its icon in the Finder. It should then mount the image and display its contents. You can see the installer package and the uninstall program when you double-click the image file in the Finder window.

Note that the .dmg file is write-protected and as a system administrator you must first convert the .dmg file into a read or write format. You also must convert and resize the image before distributing the installer to users.

  1. Install the Juniper Secure Connect application manually on one device. After the installation is complete, initiate a connection to the profiles to be saved for the users.
  2. Create a folder with name JuniperSecureConnect including the sub-directories as shown below (all directory are case-sensitive):

    \Users\...\Documents\JuniperSecureConnect\ImportDir

    \Users\...\Documents\JuniperSecureConnect\ImportDir\cacerts

    \Users\...\Documents\JuniperSecureConnect\ImportDir\certs

  3. Copy the ncpphone.cfg file from \Library\Application Support\Juniper\SecureConnect\ folder to the following folder:

    \Users\...\Documents\JuniperSecureConnect\ImportDir

  4. Copy your CA certificates to the following folder:

    \Users\...\Documents\JuniperSecureConnect\ImportDir\cacerts\

  5. (Optional) To add a custom branding option, follow these steps:

    • Create an .ini file named ProjectLogo.ini that contains the following information:

    • Create a logo in .bmp file format and with cbo.png file name. The width of the image must be 328 pixels only. The height of the image can be adjusted from 24 pixels and above.

    • You can optionally create an HTML file with cbo.html as a file name that will open if the user clicks on the logo in the application.

    • Now copy these three files (ProjectLogo.ini, cbo.png, and cbo.html) into the following folder:

      \Users\...\Documents\JuniperSecureConnect\ImportDir\

  6. Skip this step, if you are using pre-shared key authentication method.

    For EAP-TLS authentication, you must save the user certificates only with name user.p12 in below directory.

    \Users\...\Documents\JuniperSecureConnect\ImportDir\certs\

    Ensure that user certificate is unique for each installation package.

  7. On macOS, open the Disk Utility.app as shown in Figure 13.
    Figure 13: Disk UtilityDisk Utility
  8. In the menu bar, select Images > Convert as shown in Figure 14.
    Figure 14: Convert an ImageConvert an Image
  9. Select the image that you would like to use as shown in Figure 15.
    Figure 15: Select Juniper Secure Connect ImageSelect Juniper Secure Connect Image
  10. Select the folder location and save this image with the name of your choice. Change the Image Format to read/write and click Convert as shown in Figure 16.
    Figure 16: Update Image FormatUpdate Image Format
  11. Once the conversion is successful, click Done as shown in Figure 17. The version that you see on the figure is dependent on the Juniper Secure Connect application release number.
    Figure 17: Image Conversion Process Image Conversion Process
  12. Unmount this disk in the Disk Utility tool as shown in Figure 18.
    Figure 18: Unmount ProcessUnmount Process
  13. Double-click on the newly created image to get it mounted as shown in Figure 19.
    Figure 19: Mount the new ImageMount the new Image
  14. Copy the ImportDir directory to this mounted drive as shown in Figure 20.
    Figure 20: Copy ImportDir Folder To Mount DriveCopy ImportDir Folder To Mount Drive
  15. Navigate back to the Disk Utility tool. In the menu bar, select Images > Resize… and then select the file as shown in Figure 21.
    Figure 21: Navigate to Resize Image OptionNavigate to Resize Image Option
  16. Set the New Size to 1MB, and click Resize as shown in Figure 22.
    Figure 22: Resize ImageResize Image

You’ve successfully created the rollout package and ready to distribute Juniper Secure Connect installer. The newly created .dmg file is the installer.