Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set up a VPN on a Mac OS X to connect to OpenVPN server.
I've been provided the following files:

  • client.key
  • client.crt
  • ta.key
  • ca.crt

I added to the Keychain System client.crt & ca.crt, it worked, but when I try to use a certificate in the VPN authentification configuration I get the following error :

Certificate authentication cannot be used because your keychain does not contain any suitable certificates. Use Keychain Access to import the appropriate certificates into your keychain. If you do not have the certificates required for authentication, contact your network administrator.

Any ideas?

share|improve this question
See:… – kenorb Oct 24 '13 at 12:16

This is not going to work. The built-in VPN uses either PPTP or IPSec while OpenVPN uses SSL, both products are not compatible. Use Tunnelblick instead.

share|improve this answer

You've to generate pkcs12 file first and then import it into Keychain access.

You can do that by the following command:

openssl pkcs12 -export -clcerts -inkey private.key -in certificate.crt -out MyPKCS12.p12 -name "Your Name"

Then your Keychain access should recognise your certificate.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.