Learn how to install and use Tarleton's VPN with your personal Mac. The VPN is required to connect to your office computer or to access your T drive or other network share drives. A VPN is not required for the majority of other Tarleton systems you may access remotely.
These instructions are for a personally owned Mac. If you are using a Tarleton laptop needing VPN, please contact tech support and request a VPN installation.
Download FortiClient VPN
You cannot access the website to download FortiClient VPN while connected to the Tarleton network. If trying to install the VPN on your laptop, wait until at home or otherwise away from campus.
Open a web browser, and go to https://vpn.tarleton.edu:10443
Sign in with your Tarleton email address and password. Then authorize the connection with Microsoft Authenticator when prompted.
Click on Download FortiClient.
Click on Mac.
In the new window/tab, click on the FortiClient dmg to start the download.
Install FortiClient VPN
You'll need to be an administrator on your Mac to run the installer. If your Mac's password does not work during the installation process, you'll need to try to use another account setup on the Mac.
Open the downloaded FortiClientInstaller.app file. You can find it in your web browser’s download window. Or by opening your Downloads folder.
Go through the installer, clicking Continue and agreeing to terms as prompted.
Click Install. Several pop-up windows will come during the end and after the installation is complete.
You can close the Background Item pop-ups in the upper right.
Click Allow on the prompt to add FortiTray to VPN Configurations.
On the System Extension Blocked prompt, click Open System Settings. It should open System Settings ⇾ Security & Privacy. And it should scroll to near the bottom of the section.
Look for a message: Some system software requires your attention before it can be used. Click on Details next to it.
Enable FortiClientNetwork and FortiTray, then click Okay.
While still in System Settings ⇾ Security & Privacy, scroll up to Full Disk Access and click on it.
Enable fctservctl2 if present.
If a prompt for FortiClientAgent comes up at any point, enter the current account’s password to clear it.
Using FortiClient VPN
You can open FortiClient anytime, but the VPN connection will only appear when the Mac is connected to the Internet, but not on the Tarleton network.
Click on the FortiClient icon (looks like a shield) in the top menu bar. And then click Connect to vpn.tarleton.edu.
Or, you can open FortiClient in the Applications folder, and then click SAML Login.
When prompted, enter your Tarleton email address, password, and use Microsoft Authenticator.
Once connected, a red Disconnect option will appear when clicking on the FortiClient menu bar icon.
If you had the FortiClient window open, it will disappear. If you then open the FortiClient window again, it will display your VPN session details and a Disconnect button.
End the VPN session by clicking on Disconnect in either the menu bar or app window.
Troubleshooting Missing System Permissions
macOS has built-in security protocols which require admin user permissions to be given for some types of applications, including VPN. If any of the allow/security prompts from install are missed (and they can be, as several appear around the same time) then FortiClient will not function until the necessary permissions are given to the system.
Click on the Apple menu, and then click on System Settings.
Go to Security & Privacy on the left (macOS 13 and later).
Scroll to near the bottom of the list on the right. Look for any single line messages about some software needing your attention. If you see such a message, click the button next to it and enable all items.
Still in Security & Privacy, scroll the right side up to Full Disk Access and click it.
Enable fctservctl2 if present. If that doesn’t seem to be enough, then also enable any item with Forti in its name.
Still in System Settings, click on VPN on the left side.
You should see the FortiClient icon next to VPN. If so, then leave it alone, the setting is correct. If that is missing, then you should get a prompt to allow FortiTray to be added to VPN configurations when trying to open and connect with FortiClient.
macOS 12 and earlier systems can open Security under System Settings, and they should see a message to enable the needed permissions for FortiClient.