cer file in a TextEdit (Mac) or Notepad (Windows) and copy the parts between the -BEGIN CERTIFICATE- and -END CERTIFICATE- lines from the generated certificate.

Connect to the Azure Portal from the client where the certificates were generated from.

It will be needed to install the client certificate in the client later.

Select a secure password and write it down.

Personal Information Exchange - PKCS #12 (.PFX) format.

Export the root certificate from Certificate Manager (certmgr.msc).Replace P2SRootCert and P2SChildCert with something appropriate for the site such as RootCert and ClientCert where is replaced with the actual site name.

The following commands are executed in Powershell in ‘ Run as administrator’ mode.

Note: 2016 theoretically should work but certificate could not be installed in Azure when tested previously.

Openssl pkcs12 -export -out clientCert.pfx -inkey clientCert.key -in clientCert.cer -certfile RootAzureVPN.cer Openssl x509 -req -sha256 -in clientCert.req -out clientCert.cer -CAkey RootAzureVPN.key -CA RootAzureVPN.cer -days 1825 -CAcreateserial -CAserial serial

# Generate a certificate from the certificate request and sign it as the CA that you are. Openssl req -new -out clientCert.req -key clientCert.key -subj /CN=ClientAzureVPN

Osx vpn clients for azure vpn gateway