You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this article, we start with generating VPN client configuration files and client certificates:
33
30
34
-
1.[Generate files to configure the VPN client](#1-generate-vpn-client-configuration-files)
35
-
1.[Generate certificates for the VPN client](#2-generate-client-certificates)
36
-
37
-
After the steps in these sections are completed, continue on to [3. Configure the VPN client](#3-configure-the-vpn-client). The steps you use to configure your VPN client depend on the tunnel type for your P2S VPN gateway, and the VPN client on the client computer.
31
+
1.[Generate files to configure the VPN client](#1-generate-vpn-client-configuration-files).
32
+
1.[Generate certificates for the VPN client](#2-generate-client-certificates).
33
+
1.[Configure the VPN client](#3-configure-the-vpn-client). The steps you use to configure your VPN client depend on the tunnel type for your P2S VPN gateway, and the VPN client on the client computer.
38
34
39
-
***IKEv2 and SSTP - native VPN client steps** - If your P2S VPN gateway is configured to use IKEv2/SSTP and certificate authentication, you can connect to your VNet using the native VPN client that's part of your Windows operating system. This configuration doesn't require additional client software. See [IKEv2 and SSTP - native VPN client](#ike).
40
-
***OpenVPN** - If your P2S VPN gateway is configured to use an OpenVPN tunnel and certificate authentication, you have the option of using either the [Azure VPN Client](#openvpn), or the [OpenVPN client](#azurevpn).
35
+
***IKEv2 and SSTP - native VPN client steps** - If your P2S VPN gateway is configured to use IKEv2/SSTP and certificate authentication, you can connect to your VNet using the native VPN client that's part of your Windows operating system. This configuration doesn't require additional client software. For steps, see [IKEv2 and SSTP - native VPN client](point-to-site-vpn-client-certificate-windows-native.md).
36
+
***OpenVPN** - If your P2S VPN gateway is configured to use an OpenVPN tunnel and certificate authentication, you have the option of using either the [Azure VPN Client](#openvpn), or the [OpenVPN client](#azurevpn) steps in this article.
41
37
42
38
## 1. Generate VPN client configuration files
43
39
@@ -66,37 +62,10 @@ In many cases, you can install the client certificate directly on the client com
66
62
67
63
Next, configure the VPN client. Select from the following instructions:
68
64
69
-
*[IKEv2 and SSTP - native VPN client steps](#ike)
65
+
*[IKEv2 and SSTP - native VPN client steps](point-to-site-vpn-client-certificate-windows-native.md)
If your P2S VPN gateway is configured to use IKEv2/SSTP and certificate authentication, you can connect to your VNet using the native VPN client that's part of your Windows operating system. This configuration doesn't require additional client software.
Unzip the VPN client profile configuration file to view the following folders:
80
-
81
-
***WindowsAmd64** and **WindowsX86**, which contain the Windows 64-bit and 32-bit installer packages, respectively. The **WindowsAmd64** installer package is for all supported 64-bit Windows clients, not just Amd.
82
-
***Generic**, which contains general information used to create your own VPN client configuration. The Generic folder is provided if IKEv2 or SSTP+IKEv2 was configured on the gateway. If only SSTP is configured, then the Generic folder isn’t present.
You can use the same VPN client configuration package on each Windows client computer, as long as the version matches the architecture for the client. For the list of client operating systems that are supported, see the point-to-site section of the [VPN Gateway FAQ](vpn-gateway-vpn-faq.md#P2S).
87
-
88
-
>[!NOTE]
89
-
>You must have Administrator rights on the Windows client computer from which you want to connect.
90
-
91
-
1. Select the VPN client configuration files that correspond to the architecture of the Windows computer. For a 64-bit processor architecture, choose the 'VpnClientSetupAmd64' installer package. For a 32-bit processor architecture, choose the 'VpnClientSetupX86' installer package.
92
-
93
-
1. Double-click the package to install it. If you see a SmartScreen popup, click **More info**, then **Run anyway**.
94
-
95
-
1. Install the client certificate. Typically, you can do this by double-clicking the certificate file and providing a password if required. For more information, see [Install client certificates](point-to-site-how-to-vpn-client-install-azure-cert.md).
96
-
97
-
1. Connect to your VPN. Go to the **VPN** settings and locate the VPN connection that you created. It's the same name as your virtual network. Select **Connect**. A pop-up message might appear. Select **Continue** to use elevated privileges.
98
-
1. On the **Connection status** page, select **Connect** to start the connection. If you see a **Select Certificate** screen, verify that the client certificate showing is the one that you want to use to connect. If it isn't, use the drop-down arrow to select the correct certificate, and then select **OK**.
title: 'Configure P2S VPN clients: certificate authentication: Windows native client'
3
+
titleSuffix: Azure VPN Gateway
4
+
description: Learn how to configure the native VPN client on a Windows computer for point-to-site certificate authentication connections.
5
+
author: cherylmc
6
+
ms.topic: how-to
7
+
ms.service: vpn-gateway
8
+
ms.date: 01/25/2024
9
+
ms.author: cherylmc
10
+
---
11
+
12
+
# Configure the Windows native VPN client for P2S Certificate Authentication connections
13
+
14
+
If your point-to-site (P2S) VPN gateway is configured to use IKEv2/SSTP and certificate authentication, you can connect to your virtual network using the native VPN client that's part of your Windows operating system. This article walks you through the steps to configure the native VPN client and connect to your virtual network.
15
+
16
+
## Before you begin
17
+
18
+
This article assumes that you've already performed the following prerequisites:
19
+
20
+
* You created and configured your VPN gateway for point-to-site certificate authentication and an IKEv2/SSTP tunnel type. See [Configure server settings for P2S VPN Gateway connections - certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md) for steps.
21
+
* You generated client certificates and downloaded the VPN client configuration files. See [Point-to-site VPN clients: certificate authentication - Windows ](point-to-site-vpn-client-cert-windows.md)
22
+
23
+
Before beginning the workflow, verify that you're on the correct VPN client configuration article. The following table shows the configuration articles available for VPN Gateway point-to-site VPN clients. Steps differ, depending on the authentication type, tunnel type, and the client OS.
The VPN client profile configuration package contains specific folders. The files within the folders contain the settings needed to configure the VPN client profile on the client computer. The files and the settings they contain are specific to the VPN gateway and the type of authentication and tunnel your VPN gateway is configured to use.
30
+
31
+
Locate and unzip the VPN client profile configuration package you generated. For Certificate authentication and IKEv2/SSTP, you'll see the following files:
32
+
33
+
***WindowsAmd64** and **WindowsX86** contain the Windows 64-bit and 32-bit installer packages, respectively. The **WindowsAmd64** installer package is for all supported 64-bit Windows clients, not just AMD.
34
+
***Generic** contains general information used to create your own VPN client configuration. The Generic folder is provided if IKEv2 or SSTP+IKEv2 was configured on the gateway. If only SSTP is configured, then the Generic folder isn’t present.
35
+
36
+
## Configure the VPN client profile
37
+
38
+
To connect, you'll first need to configure the VPN client with the required settings. You do this by configuring the VPN client profile using the settings contained in the VPN client configuration package. The settings in the package are specific to the VPN gateway to which you connect.
39
+
40
+
You can use the same VPN client configuration package on each Windows client computer, as long as the version matches the architecture for the client. For the list of client operating systems that are supported, see the point-to-site section of the [VPN Gateway FAQ](vpn-gateway-vpn-faq.md#P2S).
41
+
42
+
>[!NOTE]
43
+
>You must have Administrator rights on the Windows client computer from which you want to connect.
44
+
45
+
1. Select the VPN client configuration files that correspond to the architecture of the Windows computer. For a 64-bit processor architecture, choose the 'VpnClientSetupAmd64' installer package. For a 32-bit processor architecture, choose the 'VpnClientSetupX86' installer package.
46
+
47
+
1. Double-click the package to install it. If you see a SmartScreen popup, select **More info**, then **Run anyway**.
48
+
49
+
1. Install the client certificate. Typically, you can do this by double-clicking the certificate file and providing a password (if required). For more information, see [Install client certificates](point-to-site-how-to-vpn-client-install-azure-cert.md).
50
+
51
+
## Connect
52
+
53
+
Connect to your virtual network via point-to-site VPN.
54
+
55
+
1. Go to the **VPN** settings and locate the VPN connection that you created. It's the same name as your virtual network. Select **Connect**. A pop-up message might appear. Select **Continue** to use elevated privileges.
56
+
1. On the **Connection status** page, select **Connect** to start the connection. If you see a **Select Certificate** screen, verify that the client certificate showing is the one that you want to use to connect. If it isn't, use the drop-down arrow to select the correct certificate, and then select **OK**.
| Microsoft Entra ID |OpenVPN (SSL) |[Windows](../articles/vpn-gateway/openvpn-azure-ad-client.md)|[Windows](../articles/vpn-gateway/openvpn-azure-ad-client.md)|
16
+
| Microsoft Entra ID | OpenVPN (SSL)|[macOS](../articles/vpn-gateway/openvpn-azure-ad-client-mac.md)|[macOS](../articles/vpn-gateway/openvpn-azure-ad-client-mac.md)|
0 commit comments