Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to just install openvpn client and login to openvpn server without copying certification stuff from the server to the client manually?

I can use the user/pass authentication with out the client certificate, but it seem that I have to copy the ca file from the server manually anyway.

Any idea ?

share|improve this question
up vote 0 down vote accepted

I used this + integrated authentication into active directory. That way my users could easily get the client up and running, yet they still had to also authenticate with the AD + be in a VPNUsers group to successfully connect. This packages all of the configuration into a single installer.

Its a difficult thing, balancing security with usability, but for my users downloading a .rar with the config package would have been way to difficult.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.