Search code examples
azurevpnopenvpn

Azure VNet Point to Site VPN and OpenVPN with Azure AD on MAC

I have setup an Azure VNet and a Point to Site VPN using the OpenVPN tunnel to maintain use of the Azure AD username and password for login.

I have sample .ovpn config files but they all require certificates, beyond what is provided by Azure.

Azure provides me with the following three files:

AzureVPN\azurevpnconfig.xml
Generic\VpnServerRoot.cer
Generic\VpnSettings.xml

How should I go about using these files to configure a .ovpn document allowing me to connect to this VPN using my MacBook?

My understanding is that the certs aren't needed since we're using a username and password to login? The downloaded VpnServerRoot.cer doesn't import to the OS Keychain...

Thank for any pointers!

Solution

  • Unfortunately, currently, MAC OS client is not available for connecting Azure point to site VPN with Azure AD authentication. The table below shows the client operating systems and the authentication options that are available to them. Refer to https://learn.microsoft.com/en-us/azure/vpn-gateway/work-remotely-support

    enter image description here

    With using the OpenVPN tunnel, you can select RADIUS and Azure Certificate authentication for your MAC OS X clients. For Mac clients, Read Configure OpenVPN clients for Azure VPN Gateway.

    Only iOS 11.0 and above and MacOS 10.13 and above are supported with OpenVPN protocol.

    and Create and install VPN client configuration files for native Azure certificate authentication P2S configurations.