OpenVPN AS ESXi appliance configuration

[deleted]

We are evaluating the OpenVPN server using the appliance
We succesfully installed it on our ESXi host, then configured it as in the guide.
We would like to use the certificate authentication, but we cannot find the configuration files server.conf as stated in the guide here:
https://openvpn.net/community-resources/how-to/#creating-configuration-files-for-server-and-clients
Do we need to manually create entries into as.conf?
Appliance version is the latest available, 2.7.5

Thanks in advance,
Stefano

The Johan

Hello Stefano,

The certificates are automatically implemented and verified in Access Server, no further configuration is required to implement these in Access Server. you can open up one of the client.ovpn files you download from the Access Server web interface to see the client private key and client public key, and the server CA public certificate.

[deleted]

Cool, so no need to generate each one by hand, I only need to create the users.
But how do I ensure that the connection can be made only via certificate and not via password?

The Johan

By default Access server verifies username, password, and certificate, for VPN connections. If you use autologin profiles, only the certificate is sufficient. But without certificate you cannot connect in any case.

If you want to prevent people from getting the certificate from the access server web interface, you can switch on the option to only allow admin users to access the web interface. But then you will have to take care of distributing the client profiles by hand, for example via the command line options.
https://openvpn.net/vpn-server-resources/create-connection-profiles-and-connect-client-installers/

[deleted]

Thank you very much, tomorrow I'll try this.