Setting Up The VPN on MacOS - Revision history

Weiler at 16:53, 15 October 2025

2025-10-15T16:53:33Z

← Older revision		Revision as of 09:53, 15 October 2025
Line 23:		Line 23:
	== Installing Tunnelblick ==		== Installing Tunnelblick ==

	Download the OpenVPN configuration file we will be using. ~~The username and password to access this web link should have been sent to you in~~ your ~~account creation welcome email~~:		Download the OpenVPN configuration file we will be using. This website is protected by CruzID, simply login using your CruzID credentials:

	https://~~giwiki~~.gi.ucsc.edu~~/downloads~~/prism-duo.ovpn		https://logserv.gi.ucsc.edu/prism-duo.ovpn

	Download that file to your Desktop by right-clicking on the link above and selecting "Save Link As...", and save it to your Desktop or some other area you will remember.		Download that file to your Desktop by right-clicking on the link above and selecting "Save Link As...", and save it to your Desktop or some other area you will remember.

Weiler: /* Login to the VPN */

2025-08-19T21:04:59Z

← Older revision		Revision as of 14:04, 19 August 2025
Line 49:		Line 49:
	ssh username@mustard.prism		ssh username@mustard.prism

	Where "username" is the username we sent you in the welcome email (incidentally it is also your CruzID username). It will ask you for a password, just type in the password we sent you in your account creation welcome email. When you type the password, the characters '''will not''' echo to the screen, so it will not show you what you are typing. Once logging in successfully to mustard, it will as you to change your password. It will ask for you current password one more time, then it will ask you to choose a new password, which you will need to enter two times. Again, whatever password you choose '''will not''' echo to the screen. You new password must be:		Where "username" is the username we sent you in the welcome email (incidentally it is also your CruzID username). It will ask you for a password, just type in the password we sent you in your account creation welcome email. When you type the password, the characters '''will not''' echo to the screen, so it will not show you what you are typing. Once logging in successfully to mustard, it will as you to change your password (if it your first time logging in - otherwise just login as usual). It will ask for you current password one more time, then it will ask you to choose a new password, which you will need to enter two times. Again, whatever password you choose '''will not''' echo to the screen. You new password must be:

	1: At least 10 characters long		1: At least 10 characters long

Weiler at 20:59, 19 August 2025

2025-08-19T20:59:24Z

← Older revision		Revision as of 13:59, 19 August 2025
Line 38:		Line 38:

	After launching Tunnelblick from the Applications folder, you will see a small "tunnel" icon on the top right of your screen, next to the date and WiFi icon. Drag the configuration file ('''prism-duo.ovpn''') on your Desktop to the little Tunnelblick icon on the top right of your screen to install the new profile. It will ask you to type in your laptop password (do that). It will also ask you if you want to install for "Only You" or "All Users". Select "Only You".		After launching Tunnelblick from the Applications folder, you will see a small "tunnel" icon on the top right of your screen, next to the date and WiFi icon. Drag the configuration file ('''prism-duo.ovpn''') on your Desktop to the little Tunnelblick icon on the top right of your screen to install the new profile. It will ask you to type in your laptop password (do that). It will also ask you if you want to install for "Only You" or "All Users". Select "Only You".

			== Login to the VPN ==

	You should be able to click on that icon again in the top right, then click "Connect prism-duo" from the resulting menu to start the VPN. "Prism" is the name of our firewalled environment. Use the username and temporary password that we sent to you in your account creation welcome email to login to the VPN for the first time. After typing in your username and password, you will be sent a Duo MFA push to your phone. Accept that push, and then you will be connected.		You should be able to click on that icon again in the top right, then click "Connect prism-duo" from the resulting menu to start the VPN. "Prism" is the name of our firewalled environment. Use the username and temporary password that we sent to you in your account creation welcome email to login to the VPN for the first time. After typing in your username and password, you will be sent a Duo MFA push to your phone. Accept that push, and then you will be connected.

Weiler at 20:58, 19 August 2025

2025-08-19T20:58:34Z

← Older revision		Revision as of 13:58, 19 August 2025
Line 21:		Line 21:
	After confirming your cell phone MFA enrollment, or if you have already done this a while ago, continue to install Tunnelblick.		After confirming your cell phone MFA enrollment, or if you have already done this a while ago, continue to install Tunnelblick.

	== ~~Install~~ Tunnelblick ==		== Installing Tunnelblick ==

	Download the OpenVPN configuration file we will be using. The username and password to access this web link should have been sent to you in your account creation welcome email:		Download the OpenVPN configuration file we will be using. The username and password to access this web link should have been sent to you in your account creation welcome email:

Weiler at 20:58, 19 August 2025

2025-08-19T20:58:11Z

← Older revision		Revision as of 13:58, 19 August 2025
Line 1:		Line 1:
	__TOC__		__TOC__

	~~'''~~NOTE: If you are installing the VPN for the first time, start here. If you are simply reinstalling tunnelblick, or installing tunnelblick on a new computer, skip down to the section '''Installing Tunnelblick'''.		NOTE: If you are installing the VPN for the first time, start here. If you are simply reinstalling tunnelblick, or installing tunnelblick on a new computer, skip down to the section '''Installing Tunnelblick'''.

	== Make Sure Your Account Forms Have Been Submitted ==		== Make Sure Your Account Forms Have Been Submitted ==

Weiler at 20:57, 19 August 2025

2025-08-19T20:57:55Z

← Older revision		Revision as of 13:57, 19 August 2025
Line 1:		Line 1:
			__TOC__

			'''NOTE: If you are installing the VPN for the first time, start here. If you are simply reinstalling tunnelblick, or installing tunnelblick on a new computer, skip down to the section '''Installing Tunnelblick'''.

			== Make Sure Your Account Forms Have Been Submitted ==

	'''Before''' following these instructions, please ensure that you have filled out an account request form and completed all the training and requirements as detailed here:		'''Before''' following these instructions, please ensure that you have filled out an account request form and completed all the training and requirements as detailed here:

Line 6:		Line 12:

	For MacOS, you will be installing "Tunnelblick", an OpenVPN client software package for Mac. Do not install this software on public or shared computers!		For MacOS, you will be installing "Tunnelblick", an OpenVPN client software package for Mac. Do not install this software on public or shared computers!

			== Make Sure You Have Enrolled in Duo ==

	Before installing Tunnelblick, you must have enrolled your cell phone for Duo MFA using your CruzID account with UCSC. Most folks already have this from when they first started at UCSC. If you don't yet have a CruzID, please contact your sponsor/PI and ask them to help you acquire a CruzID. If you have a CruzID but haven't yet enrolled your cell phone, please follow the instructions here to enroll your phone:		Before installing Tunnelblick, you must have enrolled your cell phone for Duo MFA using your CruzID account with UCSC. Most folks already have this from when they first started at UCSC. If you don't yet have a CruzID, please contact your sponsor/PI and ask them to help you acquire a CruzID. If you have a CruzID but haven't yet enrolled your cell phone, please follow the instructions here to enroll your phone:
Line 12:		Line 20:

	After confirming your cell phone MFA enrollment, or if you have already done this a while ago, continue to install Tunnelblick.		After confirming your cell phone MFA enrollment, or if you have already done this a while ago, continue to install Tunnelblick.

			== Install Tunnelblick ==

	Download the OpenVPN configuration file we will be using. The username and password to access this web link should have been sent to you in your account creation welcome email:		Download the OpenVPN configuration file we will be using. The username and password to access this web link should have been sent to you in your account creation welcome email:

Weiler at 13:37, 1 April 2025

2025-04-01T13:37:08Z

← Older revision		Revision as of 06:37, 1 April 2025
Line 3:		Line 3:
	[[Requirement_for_users_to_get_GI_VPN_access]]		[[Requirement_for_users_to_get_GI_VPN_access]]

	After completing those requirements, you should have received a welcome email from us explaining that your account is ready. Once you have received that email, continue following these instructions.		After completing those requirements, you should have received a welcome email from us explaining that your account is ready. Once you have received that email, continue following these instructions. '''If you already have a VPN Account with us, you may skip this step and continue on to Installing Tunnelblick'''.

	For MacOS, you will be installing "Tunnelblick", an OpenVPN client software package for Mac. Do not install this software on public or shared computers!		For MacOS, you will be installing "Tunnelblick", an OpenVPN client software package for Mac. Do not install this software on public or shared computers!

Weiler at 19:06, 13 February 2025

2025-02-13T19:06:00Z

← Older revision		Revision as of 12:06, 13 February 2025
Line 17:		Line 17:
	https://giwiki.gi.ucsc.edu/downloads/prism-duo.ovpn		https://giwiki.gi.ucsc.edu/downloads/prism-duo.ovpn

	~~And save~~ that file to your Desktop.		Download that file to your Desktop by right-clicking on the link above and selecting "Save Link As...", and save it to your Desktop or some other area you will remember.

	Next, you will need to download Tunnelblick (the latest Stable Version) from this link:		Next, you will need to download Tunnelblick (the latest Stable Version) from this link:

Weiler at 00:17, 11 February 2025

2025-02-11T00:17:28Z

← Older revision		Revision as of 17:17, 10 February 2025
Line 23:		Line 23:
	https://tunnelblick.net/downloads.html		https://tunnelblick.net/downloads.html

	Once you have downloaded Tunnelblick, double-click on it and proceed through the installation steps~~. During installation, it will ask you if you want to install for "Only You" or "All Users". Select "Only You"~~. At the end it will ask if you have any configuration files, say "Yes" and ~~select the '''prism-duo.ovpn''' file you downloaded earlier~~.		Once you have downloaded Tunnelblick, double-click on it and proceed through the installation steps. At the end it will ask if you have any configuration files, say "Yes" and click "OK".

	After installation, in your Finder, you may want to navigate to the Applications folder and drag the Tunnelblick icon to your dock for easy launching.		After installation, in your Finder, you may want to navigate to the Applications folder and drag the Tunnelblick icon to your dock for easy launching.

	After launching Tunnelblick from the Applications folder, you will see a small "tunnel" icon on the top right of your screen, next to the date and WiFi icon. You should be able to click on that icon, then click "Connect prism-duo" to start the VPN. "Prism" is the name of our firewalled environment. Use the username and temporary password that we sent to you in your account creation welcome email to login to the VPN for the first time. After typing in your username and password, you will be sent a Duo MFA push to your phone. Accept that push, and then you will be connected.		After launching Tunnelblick from the Applications folder, you will see a small "tunnel" icon on the top right of your screen, next to the date and WiFi icon. Drag the configuration file ('''prism-duo.ovpn''') on your Desktop to the little Tunnelblick icon on the top right of your screen to install the new profile. It will ask you to type in your laptop password (do that). It will also ask you if you want to install for "Only You" or "All Users". Select "Only You".

			You should be able to click on that icon again in the top right, then click "Connect prism-duo" from the resulting menu to start the VPN. "Prism" is the name of our firewalled environment. Use the username and temporary password that we sent to you in your account creation welcome email to login to the VPN for the first time. After typing in your username and password, you will be sent a Duo MFA push to your phone. Accept that push, and then you will be connected.

	Once you authenticate to the VPN (username/password/MFA), then login via SSH to 'mustard.prism' for example, and you will be asked to change your password.		Once you authenticate to the VPN (username/password/MFA), then login via SSH to 'mustard.prism' for example, and you will be asked to change your password.
Line 40:		Line 42:
	2: At least 3 character classes (lowercase, uppercase, number and/or special character)		2: At least 3 character classes (lowercase, uppercase, number and/or special character)

	Once you change your password, it will log you out of mustard. Then, log out of the VPN (click the Tunnelblick icon on the top right of your screen and select "disconnect"). Then, log back into the VPN using your '''new''' password. It will send another Duo MFA push to your phone, then you should be logged in!		Once you change your password, it will log you out of mustard. '''Then, log out of the VPN''' (click the Tunnelblick icon on the top right of your screen and select "disconnect"). This step is very important. Then, log back into the VPN using your '''new''' password. It will send another Duo MFA push to your phone, then you should be logged in!

	Then feel free to ssh to any of our firewalled servers (using your new password). Note the following page for available resources:		Then feel free to ssh to any of our firewalled servers (using your new password). Note the following page for available resources:

Weiler at 21:20, 10 February 2025

2025-02-10T21:20:42Z

← Older revision		Revision as of 14:20, 10 February 2025
Line 5:		Line 5:
	After completing those requirements, you should have received a welcome email from us explaining that your account is ready. Once you have received that email, continue following these instructions.		After completing those requirements, you should have received a welcome email from us explaining that your account is ready. Once you have received that email, continue following these instructions.

	For MacOS, you will be installing "Tunnelblick", an OpenVPN client software package for Mac~~. This software is pre-packaged for our systems and already includes built-in configuration~~. Do not install this software on public or shared computers!		For MacOS, you will be installing "Tunnelblick", an OpenVPN client software package for Mac. Do not install this software on public or shared computers!

	Before installing Tunnelblick, you must have enrolled your cell phone for Duo MFA using your CruzID account with UCSC. Most folks already have this from when they first started at UCSC. If you don't yet have a CruzID, please contact your sponsor/PI and ask them to help you acquire a CruzID. If you have a CruzID but haven't yet enrolled your cell phone, please follow the instructions here to enroll your phone:		Before installing Tunnelblick, you must have enrolled your cell phone for Duo MFA using your CruzID account with UCSC. Most folks already have this from when they first started at UCSC. If you don't yet have a CruzID, please contact your sponsor/PI and ask them to help you acquire a CruzID. If you have a CruzID but haven't yet enrolled your cell phone, please follow the instructions here to enroll your phone:
Line 11:		Line 11:
	https://its.ucsc.edu/mfa/enroll.html		https://its.ucsc.edu/mfa/enroll.html

	After confirming your cell phone MFA enrollment, or if you have already done this a while ago, continue to install Tunnelblick. ~~You will need to download Tunnelblick from this link:~~		After confirming your cell phone MFA enrollment, or if you have already done this a while ago, continue to install Tunnelblick.

	~~https~~:~~//giwiki.gi.ucsc.edu/downloads/Tunnelblick.dmg~~		Download the OpenVPN configuration file we will be using. The username and password to access this web link should have been sent to you in your account creation welcome email:

	~~The username and password to access that web link will be sent to you in your account creation welcome email~~.		https://giwiki.gi.ucsc.edu/downloads/prism-duo.ovpn

	Once you have downloaded ~~the file~~, ~~navigate in the Finder to wherever you downloaded it to and~~ double click on it~~. It should open the .dmg file~~ and ~~you should see~~ the ~~Tunnelblick application icon. Double click on the Tunnelblick icon to install~~. During installation, it will ask you if you want to install for "Only You" or "All Users". Select "Only You".		And save that file to your Desktop.

			Next, you will need to download Tunnelblick (the latest Stable Version) from this link:

			https://tunnelblick.net/downloads.html

			Once you have downloaded Tunnelblick, double-click on it and proceed through the installation steps. During installation, it will ask you if you want to install for "Only You" or "All Users". Select "Only You". At the end it will ask if you have any configuration files, say "Yes" and select the '''prism-duo.ovpn''' file you downloaded earlier.

	After installation, in your Finder, you may want to navigate to the Applications folder and drag the Tunnelblick icon to your dock for easy launching.		After installation, in your Finder, you may want to navigate to the Applications folder and drag the Tunnelblick icon to your dock for easy launching.

	After launching Tunnelblick from the Applications folder, you will see a small "tunnel" icon on the top right of your screen, next to the date and WiFi icon. You should be able to click on that icon, then click "Connect prism" to start the VPN. "Prism" is the name of our firewalled environment. Use the username and temporary password that we sent to you in your account creation welcome email to login to the VPN for the first time. After typing in your username and password, you will be sent a Duo MFA push to your phone. Accept that push, and then you will be connected.		After launching Tunnelblick from the Applications folder, you will see a small "tunnel" icon on the top right of your screen, next to the date and WiFi icon. You should be able to click on that icon, then click "Connect prism-duo" to start the VPN. "Prism" is the name of our firewalled environment. Use the username and temporary password that we sent to you in your account creation welcome email to login to the VPN for the first time. After typing in your username and password, you will be sent a Duo MFA push to your phone. Accept that push, and then you will be connected.

	Once you authenticate to the VPN (username/password/MFA), then login via SSH to 'mustard.prism' for example, and you will be asked to change your password.		Once you authenticate to the VPN (username/password/MFA), then login via SSH to 'mustard.prism' for example, and you will be asked to change your password.