Docs

VPN Connet

SSL-VPN client certificate

Downloading an SSL-VPN client certificate

You must load SSL-VPN client certificates to your SSL-VPN clients before connecting SSL-VPN. This topic describes how to download an SSL-VPN client certificate.

Prerequisites

Create an SSL-VPN client certificate. For procedure, see Creating an SSL-VPN client certificate.

Procedure

In the top menu bar, select a target region and project.

In the SSL-VPN client certificate list, click Download configuration in the Actions column of the target SSL-VPN client certificate.

In the pop-up dialog box, select the format of the SSL-VPN client certificate, supporting .zip and .ovpn formats.

.zip (default)

A .zip package containing the SSL-VPN client configuration and certificate collection.

If the downloaded certificate is used for SSL-VPN connections on a MAC client, a Windows client, or a Linux client, this format is recommended.

After downloading, you can find a .zip file prefixed with certs_vsc on the lower-left corner of the page. That is the client certificate. The .zip file of client certificate contains four files.

.ovpn

A file merging the SSL-VPN client configuration and certificate information.

If the downloaded certificate is used for SSL-VPN connections on an iOS or Android client, this format is recommended. After downloading, you can directly use the certificate on an iOS client to initiate an SSL-VPN connection.

tip

If you need to use the downloaded .zip file for an iOS or Android client, you can merge the certificate files and then use the merged file on the iOS client. For specific actions, see Merging client certificates.

What to do next

Configure a client: After obtaining the SSL-VPN client certificate, you can use it to configure your client device.

Modify an SSL-VPN client certificate: If you are using the Pritunl client to connect, you need to modify the downloaded configuration file before initiating the connection.

Last updated: 2026.07.15 18:18:56