VPN: Connect to Ivanti Secure Access | Linux (Ubuntu / Mint / Debian)

Important: Current Ivanti Linux client versions (22.8R2) require libwebkit2gtk-4.0.
RHEL 10/Fedora 43 have deprecated or removed legacy WebKitGTK packages and may not work until we receive an update from Ivanti.
Ubuntu 24.04 ships libwebkit2gtk-4.1, and you must temporarily add a Jammy (22.04) repository to install the required package, then remove it immediately.
Ivanti has indicated they are working to remove this dependency in a future release.

Overview

These instructions are for installing Ivanti Secure Access VPN on Debian, Mint, and Ubuntu Linux.

Download the appropriate Ivanti Secure Access application based on your OS from the OIT Software Download Site.

Prerequisites

• Ensure your OS is fully up to date.
• Download the installer package (.zip) to your ~/Downloads folder and unzip it.
• The certificate (.crt) file is only used with Linux Mint.

OS-Specific Instructions

• Debian 11 and 12: Skip to Section IV.
• Ubuntu 22.04: Skip to Section III.
• Linux Mint (v22.1 “Xia”): Skip to Section II.
• Ubuntu 24.04: Follow Section I first, then skip to Section III.

I. Ubuntu 24.04 — Add Jammy Repository (Temporary)

Run the following commands in Terminal:

sudo nano /etc/apt/sources.list.d/jammy.list

Add this line:

deb [arch=amd64] http://us.archive.ubuntu.com/ubuntu jammy main restricted universe multiverse

Save and exit, then:

sudo apt update

II. Linux Mint — Create Custom Source & Install Root Certificate

cd /etc/apt/sources.list.d ; sudo mkdir extra ; cd extra
sudo nano jammy-repo.list

Add:

deb [arch=amd64] http://us.archive.ubuntu.com/ubuntu jammy main restricted universe multiverse

Save and exit, then configure certificate:

cd /usr/share/ca-certificates ; sudo mkdir extra ; cd extra
sudo cp ~/Downloads/InCommonRSAServerCA_2.crt ./
sudo dpkg-reconfigure ca-certificates

III. Install Dependencies

For Ubuntu 24.04 and Mint, after adding Jammy repo:

sudo apt-get install libwebkit2gtk-4.0-37
sudo apt-get install libnss3-tools

Important: Remove the Jammy repo after installation:

sudo rm /etc/apt/sources.list.d/jammy.list
sudo apt update

IV. Install VPN Client and CEF Browser

cd ~/Downloads
sudo apt install ./ps-pulse-linux-22.7r4-b30859-64bit-installer.deb
sudo /opt/pulsesecure/bin/setup_cef.sh install

V. Create Connection Profile

• Launch pulseUI from Applications.
• Name: UTK
• Server URL: access.utk.edu
• Authenticate with NetID/password & Duo 2FA.