You can use this document to install the SSL VPN client for Mac OS version 10.11 and higher. 

Catalina is not supported at this time, as a 64-bit version is currently not available.


Step 1: Download the SSL VPN client

For Account Administrators only.

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure
  2. Click SSL VPN
  3. Click Members.
  4. Click the plus ( + ) icon.
  5. In the drop-down menu, enter and select the name of the user, or their email address.

  6. Mark the desired data center or data centers that the user can connect to.

  7. Click Submit.

  8. Click Client
  9. Click Download SSL VPN client
  10. In your machine, right-click the downloaded file, and then click Open. This action will extract a directory called mac_phat_client
  11. Verify that the filename is mac_phat_client, and not mac_phat_client 02 or mac_phat_client 03 because the full installer location cannot contain any spaces. 


Step 2: Copy files to the correct directory

From the recently extracted mac_phat_client directory, copy the naclient.cfg file to the root directory of your system. You can perform this action through the GUI or through the command line.

  1. Click the Finder window, and then navigate to the top of the desktop. 
  2. Click Finder, click Preferences and then click Sidebar
  3. In the left side of the desktop, under Devices, mark Hard Disk.
  4. In the Finder window, under Devices, locate Macintosh HD.
  5. From the mac_phat_client directory, copy the naclient.cfg file, and then paste the file in the same location as Application, Library, and System folders. 
    • You can also select and drag. 
  6. You will need to enter your system local admin password to authenticate. 
  1. Open a terminal (Applications > Utilities > Terminal).
  2. Enter the following command: 

    sudo cp /Users/$USER/Downloads/mac_phat_client/naclient.cfg /
    • You will need to enter your administrator password to authenticate. 


Step 3: Install the SSL VPN client

  1. Inside the mac_phat_client directory, open the naclient.pkg file. 
  2. You will receive an error that says System Extension Blocked, with an explanation that mentions Mattias Nissler. You must enable these extensions; access your security preferences, and then click Allow for the application.
    1. If you cannot allow the application, you must reboot your machine. 
    2. After you reboot, access your security preferences, and then click Allow for the appliance. 
  3. When you exit the installer, a pop-up to move the installer to trash will appear. Click Keep
  4. In the Applications folder, double-click the naclient application, and then log into the application. 
  5. If you receive an error message that the naclient is not optimized for your Mac, click OK, and the continue the login process, including your MFA process. 




Was this helpful?