This article explains how to export your own, personal VPN authenticate certificate from your primary BRCC computer and save it to a location where you can import it into a loaner laptop or other authorized device.


In order to maximize the security of our new VPN system, VPN users are required to authenticate using a special encryption "certificate" in addition to their usual BRCC username and password as well as 'multi-factor authentication' code. This additional steps makes it substantially more difficult for a threat actor to access sensitive information within our College network using our VPN system - even if they compromised someone's user account.


In general, most full time employees do NOT need to follow these steps as this certificate is automatically deployed to your primary BRCC computer workstation. The most common reasons you might need to follow the steps in this article are:

1) you were recently assigned a new computer

2) you need to use a loaner laptop

3) you have been assigned more than one computer

4) you have been authorized by CIO to connect to our VPN system using a non-BRCC computer


How to Export your Certificate:


1. While on campus connected to the BRCC network, log into your normal, permanently assigned BRCC computer

2. Copy the text between the double quotes below in the text box in your Windows task bar and press enter: 

     Copy this text --> "\\blueridge.edu\netlogon\Export_Your_Global_Protect_User_Certificate.cmd"


Picture of text box in Windows task bar - usually at bottom of your screen 

3. When prompted, select a location to save your certificate file. The filename will be something like "UserClientCert-USERNAME-123abc123.pfx".


  • Recommended: Save to your personal OneDrive
  • If you have access to your BRCC "OneDrive" personal folder on this computer, we strongly recommend you create a folder in within your own, personal OneDrive and save the file there.
  • This way, you can simply login to OneDrive on the destination computer and retrieve the file. In addition, you can keep your personal certificate file in your OneDrive so you can easily install it again later into a new computer or otherwise later.
  • Do NOT save this file to a shared departmental folder -- only to your own OneDrive folder.


File Save As dialog - showing saving to my personal OneDrive folder


  • Alternative locations: These locations are less desirable since you will need to take additional steps to get the file where it needs to go. 
    • Save to your "Downloads" folder. From there, you can move it to another location such as a USB thumb drive or, you can email the file to yourself.
    • Save to an external USB stick. You can then plug in the USB stick into the target computer and import it from there. 


4. Password Protect your Certificate File 

You must set a password to protect your certificate file. You will be prompted to enter the same password twice to make sure you typed the password correctly.


5. The export process should be complete at this point and the file should be present where you saved it.


We recommend you select a strong, unique password for this file that is different from your current BRCC login password. You will need to know this password to import it onto the target computer.


This certificate file is an electronic way to verify your identity. Therefore, treat it as sensitive information and only store it in a secure location such as within your own, personal OneDrive folder. If you copy this file to a less secure location such as a loaner laptop or USB flash drive, delete the file from these insecure locations as soon as you know the import has worked and you are able to connect to the VPN.