Merge pull request #296533 from cherylmc/entra1

P2S VWAN certificate and Entra

Author: AnnaMHuff

articles/virtual-wan/point-to-site-entra-vpn-client-windows.md

@@ -6,7 +6,7 @@ services: virtual-wan
 author: cherylmc
 ms.service: azure-virtual-wan
 ms.topic: how-to
-ms.date: 03/07/2025
+ms.date: 03/20/2025
 ms.author: cherylmc
 
 #Audience and custom App ID values are not sensitive data. Please do not remove. They are required for the configuration.
@@ -44,6 +44,8 @@ This article continues on from the [Configure a User VPN (P2S) gateway for Micro
 
 ## <a name="download"></a>Download the Azure VPN Client
 
+The features and settings that are available for the Azure VPN Client are dependent on the version of the client that you're using. For Azure VPN Client version information, see [Azure VPN Client versions](azure-vpn-client-versions.md).
+
 [!INCLUDE [Download Azure VPN Client](../../includes/vpn-gateway-download-vpn-client.md)]
 
 ## <a name="generate"></a>Extract client profile configuration files
@@ -56,20 +58,49 @@ After you obtain the VPN client profile configuration package, extract the zip f
 
 [!INCLUDE [custom audience steps](../../includes/vpn-gateway-entra-vpn-client-custom.md)]
 
-## <a name="import"></a>Import client profile configuration settings
+## <a name="import"></a>Configure the Azure VPN Client and connect
 
 > [!NOTE]
 > [!INCLUDE [Entra VPN client note](../../includes/vpn-gateway-entra-vpn-client-note.md)]
 
-> [!INCLUDE [Import settings](../../includes/vpn-gateway-vwan-azure-vpn-client-entra-windows.md)]
+[!INCLUDE [Import settings](../../includes/vpn-gateway-vwan-azure-vpn-client-entra-windows.md)]
 
-## Optional client configuration settings
+## Working with connections
 
-You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other settings. For more information, see [Configure Azure VPN Client optional settings](azure-vpn-client-optional-configurations.md).
+### <a name="autoconnect"></a>Connect automatically
+
+You can configure your connection to connect automatically with Always-on.
+
+1. On the home page for your VPN client, select **VPN Settings**. If you see the switch apps dialogue box, select **Yes**.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png" alt-text="Screenshot of the VPN home page with VPN Settings selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png":::
+
+1. If the profile that you want to configure is connected, disconnect the connection, then highlight the profile and select the **Connect automatically** check box.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png" alt-text="Screenshot of the Settings window, with the Connect automatically box checked." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png":::
+
+1. Select **Connect** to initiate the VPN connection.
 
-## Azure VPN Client version information
+### <a name="diagnose"></a>Diagnose connection issues
 
-For Azure VPN Client version information, see [Azure VPN Client versions](azure-vpn-client-versions.md).
+#### Prerequisites check
+
+If your Azure VPN Client is version 4.0.0.0 or later, you can run a prerequisites check to verify that your computer has the necessary items configured and installed in order to successfully connect. To view the version number of an installed Azure VPN Client, launch the client and select **Help**.
+
+1. Click the **...** at the bottom of the Azure VPN Client page and select **Prerequisites**.
+1. On the **Test Application Prerequisites** page, select **Run Prerequisites Test**.
+1. Fix any issues and try connecting again. For more information, see [Azure VPN Client prerequisites check](azure-vpn-client-prerequisites-check.md).
+
+#### Diagnostics tool
+
+1. Select the **...** next to the VPN connection that you want to diagnose to reveal the menu. Then select **Diagnose**.
+1. On the **Connection Properties** page, select **Run Diagnostics**. If asked, sign in with your credentials, then view the results.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png" alt-text="Screenshot of the ellipsis and Diagnose selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png":::
+
+## Configure custom settings: DNS and routing
+
+You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other settings. For more information, see [Configure Azure VPN Client optional settings](azure-vpn-client-optional-configurations.md).
 
 ## Next steps
 

articles/virtual-wan/vpn-client-certificate-windows.md

@@ -5,7 +5,7 @@ description: Learn how to configure the Azure VPN Client on a Windows operating
 author: cherylmc
 ms.service: azure-virtual-wan
 ms.topic: how-to
-ms.date: 03/13/2025
+ms.date: 03/20/2025
 ms.author: cherylmc
 ---
 
@@ -56,21 +56,52 @@ Locate and unzip the VPN client profile configuration package you generated. For
 
 If you don't see either file, or you don't have an **AzureVPN** folder, verify that your VPN gateway is configured to use the OpenVPN tunnel type and that certificate authentication is selected.
 
-### Download the Azure VPN Client
+## Download the Azure VPN Client
+
+The features and settings that are available for the Azure VPN Client are dependent on the version of the client that you're using. For information about Azure VPN Client versions, see the [Azure VPN Client versions](azure-vpn-client-versions.md) article.
 
 [!INCLUDE [Download the Azure VPN client](../../includes/vpn-gateway-download-vpn-client.md)]
 
-### Configure the Azure VPN Client profile
+## Configure the Azure VPN Client and connect
 
 [!INCLUDE [Configure the Azure VPN client](../../includes/vpn-gateway-vwan-configure-azure-vpn-client-certificate.md)]
 
-If you experience connection issues, if you're running the v4.0.0.0 version of the Azure VPN Client or later, you can click the **...** at the bottom of the Azure VPN Client page and select **Prerequisites**. On the **Test Application Prerequisites** page, select **Run Prerequisites Test**. Fix any issues and try connecting again. For more information, see [Azure VPN Client prerequisites check](azure-vpn-client-prerequisites-check.md).
+[!INCLUDE [Work with profiles](../../includes/vpn-gateway-vwan-azure-vpn-client-certificate-windows.md)]
+
+## Working with connections
+
+### <a name="autoconnect"></a>Connect automatically
+
+These steps help you configure your connection to connect automatically with Always-on.
+
+1. On the home page for your VPN client, select **VPN Settings**. If you see the switch apps dialogue box, select **Yes**.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png" alt-text="Screenshot of the VPN home page with VPN Settings selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png":::
+
+1. If the profile that you want to configure is connected, disconnect the connection, then highlight the profile and select the **Connect automatically** check box.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png" alt-text="Screenshot of the Settings window, with the Connect automatically box checked." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png":::
+
+1. Select **Connect** to initiate the VPN connection.
+
+### <a name="diagnose"></a>Diagnose connection issues
+
+#### Prerequisites check
+
+If your Azure VPN Client is version 4.0.0.0 or later, you can run a prerequisites check to verify that your computer has the necessary items configured and installed in order to successfully connect. To view the version number of an installed Azure VPN Client, launch the client and select **Help**.
+
+1. Click the **...** at the bottom of the Azure VPN Client page and select **Prerequisites**.
+1. On the **Test Application Prerequisites** page, select **Run Prerequisites Test**.
+1. Fix any issues and try connecting again. For more information, see [Azure VPN Client prerequisites check](azure-vpn-client-prerequisites-check.md).
+
+#### Diagnostics tool
 
-#### System tray
+1. Select the **...** next to the VPN connection that you want to diagnose to reveal the menu. Then select **Diagnose**.
+1. On the **Connection Properties** page, select **Run Diagnostics**. If asked, sign in with your credentials, then view the results.
 
-[!INCLUDE [Azure VPN Client system tray](../../includes/vpn-gateway-vwan-azure-vpn-client-tray.md)]
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png" alt-text="Screenshot of the ellipsis and Diagnose selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png":::
 
-#### Custom settings: DNS and routing
+## Configure custom settings: DNS and routing
 
 You can configure the Azure VPN Client with optional configuration settings such as more DNS servers, custom DNS, forced tunneling, custom routes, and other settings. For a description of the available settings and configuration steps, see [Azure VPN Client optional settings](azure-vpn-client-optional-configurations.md).
 

articles/vpn-gateway/point-to-site-entra-vpn-client-windows.md

@@ -5,7 +5,7 @@ titleSuffix: Azure VPN Gateway
 author: cherylmc
 ms.service: azure-vpn-gateway
 ms.topic: how-to
-ms.date: 02/10/2025
+ms.date: 03/20/2025
 ms.author: cherylmc
 
 #Audience and custom App ID values are not sensitive data. Please do not remove. They are required for the configuration.
@@ -32,6 +32,8 @@ This article continues on from the [Configure a P2S VPN gateway for Microsoft En
 
 ## <a name="download"></a>Download the Azure VPN Client
 
+The features and settings that are available for the Azure VPN Client are dependent on the version of the client that you're using. For Azure VPN Client version information, see [Azure VPN Client versions](azure-vpn-client-versions.md).
+
 [!INCLUDE [Download Azure VPN Client](../../includes/vpn-gateway-download-vpn-client.md)]
 
 ## <a name="generate"></a>Extract client profile configuration files
@@ -44,20 +46,49 @@ After you obtain the VPN client profile configuration package, extract the zip f
 
 [!INCLUDE [custom audience steps](../../includes/vpn-gateway-entra-vpn-client-custom.md)]
 
-## <a name="import"></a>Import client profile configuration settings
+## <a name="import"></a>Configure the Azure VPN Client and connect
 
 > [!NOTE]
 > [!INCLUDE [Entra VPN client note](../../includes/vpn-gateway-entra-vpn-client-note.md)]
 
 > [!INCLUDE [Import settings](../../includes/vpn-gateway-vwan-azure-vpn-client-entra-windows.md)]
 
-## Optional client configuration settings
+## Working with connections
 
-You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other settings. For more information, see [Azure VPN Client - optional settings](azure-vpn-client-optional-configurations.md).
+### <a name="autoconnect"></a>Connect automatically
+
+You can configure your connection to connect automatically with Always-on.
+
+1. On the home page for your VPN client, select **VPN Settings**. If you see the switch apps dialogue box, select **Yes**.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png" alt-text="Screenshot of the VPN home page with VPN Settings selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png":::
+
+1. If the profile that you want to configure is connected, disconnect the connection, then highlight the profile and select the **Connect automatically** check box.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png" alt-text="Screenshot of the Settings window, with the Connect automatically box checked." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png":::
+
+1. Select **Connect** to initiate the VPN connection.
 
-## Azure VPN Client version information
+### <a name="diagnose"></a>Diagnose connection issues
 
-For Azure VPN Client version information, see [Azure VPN Client versions](azure-vpn-client-versions.md).
+#### Prerequisites check
+
+If your Azure VPN Client is version 4.0.0.0 or later, you can run a prerequisites check to verify that your computer has the necessary items configured and installed in order to successfully connect. To view the version number of an installed Azure VPN Client, launch the client and select **Help**.
+
+1. Click the **...** at the bottom of the Azure VPN Client page and select **Prerequisites**.
+1. On the **Test Application Prerequisites** page, select **Run Prerequisites Test**.
+1. Fix any issues and try connecting again. For more information, see [Azure VPN Client prerequisites check](azure-vpn-client-prerequisites-check.md).
+
+#### Diagnostics tool
+
+1. Select the **...** next to the VPN connection that you want to diagnose to reveal the menu. Then select **Diagnose**.
+1. On the **Connection Properties** page, select **Run Diagnostics**. If asked, sign in with your credentials, then view the results.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png" alt-text="Screenshot of the ellipsis and Diagnose selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png":::
+
+## Configure custom settings: DNS and routing
+
+You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other settings. For more information, see [Azure VPN Client - optional settings](azure-vpn-client-optional-configurations.md).
 
 ## Next steps
 

articles/vpn-gateway/point-to-site-vpn-client-certificate-windows-azure-vpn-client.md

@@ -5,7 +5,7 @@ description: Learn how to configure VPN clients for P2S configurations that use
 author: cherylmc
 ms.service: azure-vpn-gateway
 ms.topic: how-to
-ms.date: 03/12/2025
+ms.date: 03/20/2025
 ms.author: cherylmc
 ---
 
@@ -59,27 +59,56 @@ If you don't see either file, or you don't have an **AzureVPN** folder, verify t
 
 ## Download the Azure VPN Client
 
+The features and settings that are available for the Azure VPN Client are dependent on the version of the client that you're using. For information about Azure VPN Client versions, see the [Azure VPN Client versions](azure-vpn-client-versions.md) article.
+
 [!INCLUDE [Download the Azure VPN client](../../includes/vpn-gateway-download-vpn-client.md)]
 
-## Configure the Azure VPN Client profile
+## Configure the Azure VPN Client and connect
 
-[!INCLUDE [Configure the Azure VPN client](../../includes/vpn-gateway-vwan-configure-azure-vpn-client-certificate.md)]
+[!INCLUDE [Configure the Azure VPN client profile](../../includes/vpn-gateway-vwan-configure-azure-vpn-client-certificate.md)]
 
 If you experience connection issues, if you're running the v4.0.0.0 version of the Azure VPN Client or later, you can click the **...** at the bottom of the Azure VPN Client page and select **Prerequisites**. On the **Test Application Prerequisites** page, select **Run Prerequisites Test**. Fix any issues and try connecting again. For more information, see [Azure VPN Client prerequisites check](azure-vpn-client-prerequisites-check.md).
 
-### Azure VPN Client settings
+[!INCLUDE [Work with profiles](../../includes/vpn-gateway-vwan-azure-vpn-client-certificate-windows.md)]
+
+### <a name="secondary"></a>Configure a secondary profile
 
-The following sections discuss configuration settings that are available for the Azure VPN Client. For information about Azure VPN Client versions, see the [Azure VPN Client versions](azure-vpn-client-versions.md) article.
+[!INCLUDE [Secondary profile](../../includes/vpn-gateway-azure-vpn-client-secondary-profile.md)]
 
-#### System tray
+## Working with connections
 
-[!INCLUDE [Azure VPN Client system tray](../../includes/vpn-gateway-vwan-azure-vpn-client-tray.md)]
+### <a name="autoconnect"></a>To connect automatically
 
-#### Secondary profile
+These steps help you configure your connection to connect automatically with Always-on.
 
-[!INCLUDE [Secondary profile](../../includes/vpn-gateway-azure-vpn-client-secondary-profile.md)]
+1. On the home page for your VPN client, select **VPN Settings**. If you see the switch apps dialogue box, select **Yes**.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png" alt-text="Screenshot of the VPN home page with VPN Settings selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/vpn-settings.png":::
+
+1. If the profile that you want to configure is connected, disconnect the connection, then highlight the profile and select the **Connect automatically** check box.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png" alt-text="Screenshot of the Settings window, with the Connect automatically box checked." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/automatic.png":::
+
+1. Select **Connect** to initiate the VPN connection.
+
+### <a name="diagnose"></a>Diagnose connection issues
+
+#### Prerequisites check
+
+If your Azure VPN Client is version 4.0.0.0 or later, you can run a prerequisites check to verify that your computer has the necessary items configured and installed in order to successfully connect. To view the version number of an installed Azure VPN Client, launch the client and select **Help**.
+
+1. Click the **...** at the bottom of the Azure VPN Client page and select **Prerequisites**.
+1. On the **Test Application Prerequisites** page, select **Run Prerequisites Test**.
+1. Fix any issues and try connecting again. For more information, see [Azure VPN Client prerequisites check](azure-vpn-client-prerequisites-check.md).
+
+#### Diagnostics tool
+
+1. Select the **...** next to the VPN connection that you want to diagnose to reveal the menu. Then select **Diagnose**.
+1. On the **Connection Properties** page, select **Run Diagnostics**. If asked, sign in with your credentials, then view the results.
+
+   :::image type="content" source="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png" alt-text="Screenshot of the ellipsis and Diagnose selected." lightbox="../../includes/media/vpn-gateway-vwan-azure-vpn-client-entra-windows/diagnose.png":::
 
-#### Custom settings: DNS and routing
+## Custom settings: DNS and routing
 
 You can configure the Azure VPN Client with optional configuration settings such as more DNS servers, custom DNS, forced tunneling, custom routes, and other settings. For a description of the available settings and configuration steps, see [Azure VPN Client optional settings](azure-vpn-client-optional-configurations.md).