Is it possible to roll out a single cert for all clients?

[joshcole]

I know that you can configure openvpn to not require a certificate and for example require login credentials instead. I am trying to configure openvpn to authenticate against our active directory server but wanted to know if it would be possible to use a certificate also but to roll out a single cert instead of having to generate one for each end user. I know that openvpn has created a really nice package that can accomplish this but we cannot afford licensing for it. It would be much easier to roll the vpn client out and start getting folks connected if I could use a single client cert. Any feedback is much appreciated!

Thank you!

[Mimiko]

Use "--duplicate-cn" in server's config file.

[joshcole]

This makes sense. Thank you. I will generate a new certificate and key and roll that out.