Page tree

Armor Knowledge Base


Have a suggestion for the Armor Knowledge Base?

Send a message to

You can use this document to install the SSL VPN client for Mac OS version 10.11 and higher. 

Step 1: Download the SSL VPN client

For Account Administrators only.

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure
  2. Click SSL VPN
  3. Click Members.
  4. Click the plus ( + ) icon.
  5. In the drop-down menu, enter and select the name of the user, or their email address.

  6. Mark the desired data center or data centers that the user can connect to.

  7. Click Submit.

  8. Click Client
  9. Click Download SSL VPN client
    • AMP will automatically detect your operating system; however, you can click Download for another platform to download the client for Mac OS
    • This action will download the Armor-VpnSetup.tgz file.
  10. In your machine, right-click the downloaded file, and then click Open. This action will extract a directory called mac_phat_client
  11. Verify that the filename is mac_phat_client, and not mac_phat_client 02 or mac_phat_client 03 because the full installer location cannot contain any spaces. 
    • Macintosh HD/Users/jsmith/Downloads/mac_phat_client is correct. 
    • Macintosh HD/Users/john smith/Downloads/mac_phat_client 2/ is not correct. 

Step 2: Copy files to the correct directory

From the recently extracted mac_phat_client directory, copy the naclient.cfg file to the root directory of your system. You can perform this action through the GUI or through the command line.

 Option 1: Copy via a GUI 
  1. Click the Finder window, and then navigate to the top of the desktop. 
  2. Click Finder, click Preferences and then click Sidebar
  3. In the left side of the desktop, under Devices, mark Hard Disk.
  4. In the Finder window, under Devices, locate Macintosh HD.
  5. From the mac_phat_client directory, copy the naclient.cfg file, and then paste the file in the same location as Application, Library, and System folders. 
    • You can also select and drag. 
  6. You will need to enter your system local admin password to authenticate. 
 Option 2: Copy via the command line
  1. Open a terminal (Applications > Utilities > Terminal).
  2. Enter the following command: 

    sudo cp /Users/$USER/Downloads/mac_phat_client/naclient.cfg /
    • You will need to enter your administrator password to authenticate. 

Step 3: Install the SSL VPN client

  1. Inside the mac_phat_client directory, open the naclient.pkg file. 
    • If you see a warning about an invalid certificate, click Continue, and then continue with the installation. Select Macintosh HD as the installation disk. 
  2. You will receive an error that says System Extension Blocked, with an explanation that mentions Mattias Nissler. You must enable these extensions; access your security preferences, and then click Allow for the application.
    1. If you cannot allow the application, you must reboot your machine. 
    2. After you reboot, access your security preferences, and then click Allow for the appliance. 
  3. When you exit the installer, a pop-up to move the installer to trash will appear. Click Keep
  4. In the Applications folder, double-click the naclient application, and then log into the application. 
    • Your SSL VPN login credentials are the same credentials you use to access the Armor Management Portal (AMP). 
  5. If you receive an error message that the naclient is not optimized for your Mac, click OK, and the continue the login process, including your MFA process. 
    • Additionally, you can expect to receive an error message that displays Unable to open client device file

Was this helpful?
Your Rating: Results: 1 Star2 Star3 Star4 Star5 Star 3 rates