Enable and verify FIPS-CC mode for GlobalProtect using
the macOS property list.
On macOS endpoints, use the following steps
to enable and verify FIPS-CC mode for GlobalProtect™ using the macOS plist (property
To enable FIPS-CC mode for GlobalProtect, your
must first enable FIPS-CC mode for macOS operating system. By default,
FIPS mode for the macOS operating system is automatically enabled
on endpoints running macOS 10.8 and later releases.
Open the GlobalProtect plist file and locate the
GlobalProtect customization settings.
Launch a plist editor, such as Xcode.
In the plist editor, open the following plist file:
If the Settings dictionary does not exist, create it. You
can add each key to the Settings dictionary as a string.
Enable FIPS-CC mode for GlobalProtect.
You cannot disable FIPS-CC after you enable it. To
run GlobalProtect in non-FIPS-CC mode, end users must uninstall
and then reinstall the GlobalProtect app. This clears all FIPS-CC
mode settings from the macOS plist.