Virtual Private Networks (VPN)
OpenVPN
Digi Connect EZ Mini User Guide
180
7. Determine the method of certificate management:
a. To allow the server to manage certificates:
(config vpn openvpn server
name
)> autogenerate true
(config vpn openvpn server
name
)>
b. To create certificates externally and add them to the server
(config vpn openvpn server
name
)> autogenerate false
(config vpn openvpn server
name
)>
The default setting is
false
.
c. If
autogenerate
is set to false:
i. Set the authentication type:
(config vpn openvpn server
name
)> authentication
value
(config vpn openvpn server
name
)>
where
value
is one of:
n
cert
: Uses only certificates for client authentication. Each client requires a
public and private key.
n
passwd
: Uses a username and password for client authentication. You must
create an OpenVPN authentication group and user. See
for instructions.
n
cert_passwd
: Uses both certificates and a username and password for client
authentication. Each client requires a public and private key, and you must
create an OpenVPN authentication group and user. See
for instructions.
ii. Paste the contents of the CA certificate (usually in a ca.crt file) into the value of the
cacert
parameter:
(config vpn openvpn server
name
)> cacert
value
(config vpn openvpn server
name
)>
iii. Paste the contents of the public key (for example, server.crt) into the value of the
server_cert
parameter:
(config vpn openvpn server
name
)> server_cert
value
(config vpn openvpn server
name
)>
iv. Paste the contents of the private key (for example, server.key) into the value of the
server_key
parameter:
(config vpn openvpn server
name
)> server_key
value
(config vpn openvpn server
name
)>
v. Paste the contents of the Diffie Hellman key (usually in dh2048.pem) into the value of
the
diffie
parameter:
