PennKeys and Firewalls

Does my PennKey work when I am behind a firewall?

Yes. However there are a few changes you have to make in the preferences to account for NAT (Network Address Translation).

My Firewall performs Network Address Translation (NAT). How do I work around this?

Your workaround method will depend on which of the University's supported operating systems you are using: Mac OS X, or Windows.

Macintosh OS X

1. Download the alternate configuration installer file for Mac OS X.

2. Run the installer file. It should install the proper files to enable Kerberos from behind a NAT-enabled firewall.

3. While you do not need to restart your Mac, you will need to log out of your account and log back in.
   
   Note: If you are the sole user of the machine and have forgotten your password because you have it confirgured to automatically log in, you will in fact need to restart your machine.

4. Start Kerberos.app.

5. Enter your PennKey and PennKey password as prompted. This should obtain your initial ticket-granting ticket (TGT), and you should be able to access Kerberized services for which you are authorized.

Windows XP & Vista

1. Download the alternate configuration installer file for Windows.

2. Run the installer file. It should install the proper files to enable Kerberos from behind a NAT-enabled firewall.

3. Restart your machine.

4. Start the Network Identity Manager program.

5. Enter your PennKey and PennKey password as prompted. This should obtain your initial ticket-granting ticket (TGT), and you should be able to access Kerberized services for which you are authorized.