new article

Author: cherylmc

articles/virtual-wan/TOC.yml

@@ -205,7 +205,7 @@
             - name: Linux - OpenSSL
               href: ../vpn-gateway/point-to-site-certificates-linux-openssl.md
             - name: Linux - strongSwan
-              href: ../vpn-gateway/vpn-gateway-certificates-point-to-site-linux.md
+              href: point-to-site-certificates-linux-strongswan.md
         - name: Install client certificates
           href: install-client-certificates.md
   - name: Configure P2S - Microsoft Entra ID authentication

articles/virtual-wan/point-to-site-certificates-linux-strongswan.md

@@ -0,0 +1,35 @@
+---
+title: 'Generate and export certificates for User VPN P2S: Linux - strongSwan'
+description: Learn how to create a self-signed root certificate, export the public key, and to generate client certificates using the Linux (strongSwan) CLI.
+titleSuffix: Azure Virtual WAN
+author: cherylmc
+ms.service: azure-virtual-wan
+ms.custom: linux-related-content
+ms.topic: how-to
+ms.date: 03/20/2025
+ms.author: cherylmc
+
+# The note "Microsoft recommends that you use the most secure authentication flow available. The authentication flow described in this procedure requires a very high degree of trust in the application, and carries risks that aren't present in other flows. You should only use this flow when other more secure flows, such as managed identities, aren't viable." is in the vpn-gateway-strongswan-certificates-include file.
+---
+# User VPN - Generate and export certificates - Linux (strongSwan)
+
+This article shows you how to create a self-signed root certificate and generate client certificates using strongSwan. The steps in this exercise help you create certificate **.pem** files. If you need *.pfx* and *.cer* files instead, see the [Windows- PowerShell](certificates-point-to-site.md) instructions.
+
+For point-to-site connections, each VPN client must have a client certificate installed locally to connect. Additionally, the root certificate public key information must be uploaded to Azure. For more information, see [P2S User VPN configuration - certificate authentication](virtual-wan-point-to-site-portal.md#p2sconfig).
+
+## <a name="install"></a>Install strongSwan
+
+The following steps help you install strongSwan.
+
+[!INCLUDE [strongSwan Install](../../includes/vpn-gateway-strongswan-install-include.md)]
+
+## <a name="cli"></a>Linux CLI instructions (strongSwan)
+
+The following steps help you generate and export certificates using the Linux CLI (strongSwan).
+For more information, see [Additional instructions to install the Azure CLI](/cli/azure/install-azure-cli-apt).
+
+[!INCLUDE [strongSwan certificates](../../includes/vpn-gateway-strongswan-certificates-include.md)]
+
+## Next steps
+
+Continue with your point-to-site configuration. See  [Configure P2S VPN clients: certificate authentication - Linux](point-to-site-vpn-client-certificate-ike-linux.md).