When the GlobalProtect app is installed on
macOS endpoints for the first time and client certificate authentication
is enabled on the portal or gateway, the Keychain Pop-Up prompt
appears, prompting users to enter their password so that GlobalProtect
can access and use client certificates from the login keychain.
The Keychain Pop-Up prompt can also appear when a new certificate is
installed because the previous certificate expired.
You must
use the following procedure to enable the GlobalProtect app for macOS
to use client certificates for authentication: