When the GlobalProtect app is installed on
macOS endpoints for the first time and client certificate authentication
is enabled on the portal or gateway, the Keychain Pop-Up prompt
appears, prompting users to enter their password so that GlobalProtect
can access and use client certificates from the login keychain.
The Keychain Pop-Up prompt can also appear when a new certificate
is installed because the previous certificate expired.
You
must use the following procedure to enable the GlobalProtect app
for macOS to use client certificates for authentication: