VPN FAQ

  1. What is the VPN? And why would I use it?
  2. How do I fix an error "Unable to contact the security gateway"?
  3. Why am I getting "Error 42: Unable to create certificate enrollment request"?
  4. How do I fix a "Certificate "CNetID@uchicago.edu" is not valid yet" error?
  5. Can I use the VPN with Windows 95/98/ME or Mac OS 8/9
  6. Can I set up the VPN client to automatically connect at startup?

  1. What is the VPN? And why would I use it?

    A virtual private network (VPN) is a method for creating a secure connection on top of an insecure network. The University uses it to allow access to on-campus only resources from off campus. It is not recommended as a substitute for the web proxy, since it requires the installation of fairly complex and invasive software, but may be required to access an on campus file server, for example.

    For a easy to understand technical description of a VPN, see VPNs in Plain Speak.

  2. How do I fix an error "Unable to contact the security gateway"?

    When you make your VPN connection, you will be prompted for your certificate password, even if you didn't set one (we recommend you don't). If you enter a password here, you will get this error – simply hit "OK" and you should go through successfully.

    If you created a certiifcate password, then make sure you are entering it correctly. If you can't get it to accept what you think the password is, you'll need to create a new certificate.

  3. Why am I getting "Error 42: Unable to create certificate enrollment request"?

    This error occurs when the "CA URL" field does not have accurate information in it. Double check to make sure that the URL is the same as was given in the configuration documentation. The most common cause of this problem is copy-and-paste'd URLs which have hidden characters (like the end of the line) included. We recommend typing in the URL manually.

  4. How do I fix a "Certificate "CNetID@uchicago.edu" is not valid yet" error?

    This error occurs if your computer's time is off; if the time on your clock is earlier than the time on the server when you created your certificate, you will not be able to connect. Once you fix your computer's time you should be able to connect.

  5. Can I use the VPN with Windows 95/98/ME or Mac OS 8/9

    The Cisco VPN Client is only available for Windows 2000/XP, Mac OS X 10.2 or later, as well as Linux 2.4/2.6.

  6. Can I set up the VPN client to automatically connect at startup?

    No, the Cisco VPN client cannot automate the login process.

Last updated: 10/03/06