Breadcrumbs

Configure OpenVPN Client to use Key and Certificate from Utimaco HSM

  1. List the certificate to get the serialized id using below command.

›_ Console 

> openvpn --show-pkcs11-ids “C:\Program 

Files\Utimaco\SecurityServer\Lib\cs_pkcs11_R3.dll” --verb
image-3286139025-1.jpg

List pkcs11 ids

Copy the serialized id from above command output.

  1. Right-click on OpenVPN GUI in system tray select client and click on Edit Config.

image-3286139025-2.jpg

Edit Config window

  1. Client Config file will open. Add below lines to this file and save.

client.ovpn 

pkcs11-providers "C:\\Program 

Files\\Utimaco\\SecurityServer\\Lib\\cs_pkcs11_R3.dll" 

 pkcs11-id 

pkcs11:model=CryptoServer;token=OpenVPNToken;manufacturer=Utimaco%20IS%20GmbH; serial=SI003001_0000;id=E'

Add entries into client config file

  1. Right-click on OpenVPN GUI in system tray select client and click on Connect.

image-3286139025-4.jpg

Client Connect window

  1. A window will appear. Provide the slot PIN when prompted for token password and click on OK.

image-3286139025-5.jpg

Connection establishment output

image-3286139025-6.jpg

Connection establishment output

  1. After it is connected successfully, the OpenVPN GUI icon will turn green as shown below.

image-3286139025-7.jpg

OpenVPN GUI on successful connection


This completes the Integration of OpenVPN with Utimaco SecurityServer.