GlobalProtect App Upgrade Considerations

When the GlobalProtect App is upgraded on macOS endpoints from release 5.0.x to release 5.1.x, the Keychain pop-up prompts appear, prompting users to enter their password so that GlobalProtect can access the encryption key and saved user credentials from the login keychain.
Users must enter their password and select
Always Allow
so that the Keychain pop-up prompts do not appear again.
The Keychain pop-up prompts appear only when upgrading from release 5.0.x to release 5.1.x. When the GlobalProtect app is upgraded within the 5.1.x releases, the app does not display these pop-up prompts.
The following Keychain pop-up prompt can appear when GlobalProtect requests access to the encryption key that is used to encrypt data exchanged between the GlobalProtect agent and the GlobalProtect service:
keychain-encryption-popup.png
The following Keychain pop-up prompt can appear if the
Save User Credentials
option is enabled in the portal configuration:
keychain-credentials-popup.png
Because of entitlements support changes, the bundle identifier, which is used with the supported mobile device management system (MDM), has changed in 5.1.x releases. The new bundle identifier is
com.paloaltonetworks.GlobalProtect.client
, and has changed from
com.paloaltonetworks.GlobalProtect
in 5.0.x releases. See Entitlements for details about keychain access groups entitlements.

Recommended For You