Skip to main content

AnyConnect for OS X

Note for users of MacOS version 10.12 and lower

For users of MacOS versions 10.12 and lower we offer a non supported version of an old anyconnect client:


Should the above download not work, consider using the unofficial OpenConnect client:

Note for users of MacOS versions 10.13 and above

To install AnyConnect you have to change the settings of the gatekeeper first. 

Open the settings of the Mac OS device you want to use the VPN with.

Choose under Security - General. 

Click on the lock in the lower left corner and enter your password. 

Now select "Allow apps download from" and choose "App Store and verified developers". 

You can find further information on this at:

Initial Setup - Step 1

Make sure that your computer is connected to the Internet (or to the WLAN with the "Uni-Bremen" ID). Then download the installation archive for AnyConnect (a login with your university account may be required).

If you are using OS X 10.8 Mountain Lion or later, disable the gatekeeper for the duration of this installation.

Then open the downloaded archive and open the.pkg file contained in it.

Initial Setup - Step 2

You are informed that the program wants to install a program. Confirm this by clicking on "Continue".

Initial Setup - Step 3

Then click on "Continue" on the first dialog page.

Initial Setup - Step 4

Read the license terms and then click on "Continue".

Initial Setup - Step 5

You will be asked to accept or decline the license terms. If you accept the conditions, click on "Agree", otherwise on "Disagree".

If you do not agree with the terms and conditions, it is unfortunately not possible to use the VPN service.

Initial Setup - Step 6

You now have the opportunity to specify the location of the installation. This is not necessary in most cases, so you can simply click on "Install".

The installation then takes place without any further action on your part.

Initial Setup - Step 7

Select the hard disk on which the software is to be installed (probably "Macintosh HD") and click "Continue".

Initial Setup - Step 8

Uncheck all packages except "VPN". These software modules are not necessary for a successful connection and can even be disturbing.

Then click on "Continue".

Initial Setup - Step 9

Start the Cisco AnyConnect Secure Mobility Client, e.g. via the Finder.

Initial Setup - Step 10

Open the menu "Cisco AnyConnect Secure Mobility Client" and click on "Preferences".

Initial Setup - Step 11

Check "Enable local LAN access (if configured)". This allows you to access resources on your local network (such as printers or file shares) even when the VPN connection is activated.

Then close the window.

Connect - Step 1

Start the Cisco AnyConnect Secure Mobility Client, e.g. via the Finder.

Connect - Step 2

Enter "" in the "Connect to" field, if it is not already filled in, and click on "Select".


Connect - Step 3

Enter the access data for your university account. This does not have to be the same as when installing the software (for example, on a shared computer). The access data cannot be saved and must be entered again for each connection.

Finally select the correct tunnel type under "Group" and confirm with "Connect" The program should now establish the connection.

Disconnect connection

If you no longer need the connection, click on the AnyConnect icon in the panel and select "Disconnect".


I can't download the installation file and get the message "Forbidden" instead.


  • Not all university users can access the VPN service. In particular, alumni are excluded from use.
  • If you are a regular member of the university (e. g. a regular student or employee) or SuUB staff member, please contact the Account Manager to have your account assignments checked.

During installation, the error message "The vpn client agent was unable to create the interprocess communication depot." appears

  • This error message is triggered by an activated Internet connection sharing. Deactivate the network adapter's share in the adapter settings and try the installation again.

I have successfully established a VPN connection, but can't use the library services?

  • If you want to use services that are enabled for the network area of the University of Bremen but are not "hosted" in the network area of the university (publishers are an example here), then you have to change the group from "Tunnel-Uni-Bremen" to "Tunnel-all-Traffic" when setting up a connection. For a detailed explanation please read the page VPN-Tunnelarten.
  • ATTENTION: With this option, all traffic is now routed through the tunnel. Please leave the tunnel activated with this option only as long as it is needed for working.