Launch Cisco AnyConnect Secure Mobility Client.If you don’t have this application on your. Enter “myvpn.ubc.ca” into the empty field box and click Connect. Otherwise, the Cisco AnyConnect VPN Client window should read Connection Established and a new icon should appear in the top panel of the desktop. You are now successfully connect to the UBC myVPN service. You can click on the icon to Disconnect or Quit. Manual VPN Client Installation.

Cisco Certificate Import

Applies to: All users of UBC networks (wired, wireless, VPN) at all campus locations.

By installing the Cisco Umbrella Root CA certificate on your computer, you avoid a common problem with Umbrella’s UBC block pages. When HTTPS enabled domains are blocked, Cisco Umbrella presents a block page which is also served over HTTPS. This block page is encrypted with a certificate signed by the Cisco Umbrella Root CA. The certificate will match the requested site but will be signed by the Cisco Root Certificate Authority (CA). If the Cisco Umbrella Root CA is not trusted by your browser, an error may be displayed.

Typical errors include:

• 'The security certificate presented by this website was not issued by a trusted certificate authority' (Internet Explorer / Edge)
• 'The site's security certificate is not trusted!' (Google Chrome)
• 'This Connection is Untrusted' (Mozilla Firefox)
• “Safari can’t verify the identity of the website…” (Safari on macOS)

Although the error is expected, the messages displayed can be confusing and annoying and you may wish to stop them from appearing. To avoid certificate errors when accessing the block page, you must install the Cisco Umbrella Root CA for your browser. The procedures in this article describe the manual methods for installing the Cisco Umbrella Root CA in Internet Explorer/Edge/Chrome, Firefox, and Safari browsers on an individual computer.

Installing the Cisco Umbrella Root CA on Windows
Installing the Cisco Umbrella Root CA on macOS
Installing the Cisco Umbrella Root CA in Chromium or Chrome on Linux
Download the Certificate
Instructions for UBC Edge Administrators

Installing the Cisco Umbrella Root CA on Windows

Internet Explorer, Edge or Chrome

To manually install the Cisco Umbrella Root CA on your computer, use the following procedure:

1. Using one of the listed browsers, download the Cisco Umbrella Root CA file. For more information, see Download the Certificate.
2. Open the file (unless prompted) and Click Install Certificate.
3. In the Certificate Import Wizard window, click Next.
4. In the Certificate Store window, select Place all certificates in the following store and then click Browse.
5. In the Select Certificate Store window, select Trusted Root Certification Authorities and click OK.
   In the Certificate Store window, the Certificate store:shows Trusted Root Certification Authorities.
6. Click Next and then click Finish.
7. In the Security Warning windows, click Yes to install the certificate.
   The Certificate Import Wizard will notify you that 'The import was successful.'
8. Click OK.
9. Restart browser.

Firefox

To manually install the Cisco Umbrella Root CA in your Firefox browser, use the following procedure:

1. Using Firefox, download the Cisco Umbrella Root CA file. For more information, see Download the Certificate.
2. Click the Open Menu icon near the top right-hand corner of the browser window.
3. Click Options > Privacy and Security> Certificates > View Certificates > Authorities > Import.
4. Browse for and select the Cisco Root Cert, downloaded in the first step.
5. Select Trust this CA to identify websites, then click OK and OK again.
6. Restart Firefox.

Installing the Cisco Umbrella Root CA on macOS

Cisco Anyconnect Uci

Safari or Chrome

To manually install the Cisco Umbrella Root CA in all browsers on macOS, use the following procedure. You must be the computer administrator to perform this action.

Cisco Anyconnect Ucr

1. Download the Cisco Umbrella Root CA file. For more information, see Download the Certificate.
2. Double-click the file or drag and drop it on top of the Keychain Access icon in the Applications | Utilities folder. The Add Certificate window appears.
3. Click Always Trust.
4. Double-click the Cisco Umbrella Root CA to open its properties window. Change the When using this certificate pulldown to Always Trust:

Firefox

Follow the same instructions used for Firefox on Windows.

Command line

To install the CA on the macOS command line, Download the Certificate and use terminal to run the following command as the computer administrator:

Installing the Cisco Umbrella Root CA in Chromium or Chrome on Linux

If you want to manually install the Cisco Umbrella Root CA in a Chromium based browser in Linux, use the following procedure.

1. Download the Cisco Umbrella Root CA file. For more information, see Download the Certificate.
2. Open Chromium Settings.
3. Scroll down to HTTPS/SSL.
4. Click Manage certificates.
5. Click Authorities.
6. Click Import.
7. Select the Cisco_Umbrella_Root_CA.cer and click Open.
8. Select Trust this CA to identify Websites.
9. Click OK.

Download the Cisco Umbrella Root CA Certificate

Instructions for UBC Edge Administrators

Departmental IT administrators and UBC Edge Administrators should login to the UBC Cybersecurity Confidential Communications website(CWL username/password) OR contact the UBC IT Help Desk to gain access to the documentation for more automated methods of certificate deployment to UBC owned computers, especially those on EAD.