How to Setup OpenVPN On Windows Server 2019

In this video guide, we are learning the steps for Setting Up OpenVPN on Windows Server 2019. OpenVPN is a full-featured SSL VPN. OpenVPN uses OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol.

I have also prepared a blog post with screenshots and its available in below link.

Chapters:
00:00 Introduction
2:16 Installing openVPN server
6:25 Install and setup openssl toolkit
13:23 Configure openssl
20:18 Setup CA and generate certificates for openVPN server and clients
26:14 Enable NAT on OpenVPN Server
29:21 Create Configuration file for OpenVPN server
35:56 Setup OpenVPN Client and testing the Openvpn connection

[jacksonbaidoo]

it would be a very nice idea if all these commands are in text files to download. the blog is not accessible.

[mathbloxiano]

your tutorial worked perfectly for me, I'm a beginner, you helped me a lot.
Thank you for sharing

[tomgrow]

It is an excellent tutorial, very well explained for beginners like me.
Please keep the good work!

[gaurav]

Very nice !! Has been explained very systematically and step wise, Also blog post is well drafted. Very rare video on youtube explaining openvpn "Server" setup on windows 👍.
Also can you a please also guide me how to setup a OpenVPN server on Windows 10 home edition ? i guess it should work there too with an alternative server manager tool ?. We sometimes require it for office work for employees working remotely.

[cupio]

Hi my issue is :
I made this folder : C:\Program
and when I run this command :

openssl ca -days 3650 -extensions usr_cert -cert certs\ca.crt -keyfile certs\ca.key -out client1.crt -infiles certs\client1.csr

My Error is :
Using configuration from C:\Program
ca: ./demoCA/newcerts is not a directory
./demoCA/newcerts: No error

but I have that directory !

[BuruhKoding]

When i try connect openvpn at client, i got message : TLS handshake failed, maybe can you tell me where is wrong? Thanks

[sergeilebedev]

Really very useful video! Great thanks from Russia!

[amilcargutierrez]

Error adding request extensions from section v3_req
V3 issuer
V3 in extension:crypto\x509\v3_conf.c:48:section=v3_req, name=authorityKeyIdentifier, value=keyid:always, issuer

I get this error when I input "openssl req -days 3650 -nodes -new -keyout certs\server.key -out certs\server.csr -config
I've gone over your steps and looked up for some help online but can't fix the issue

[gabordemeter]

Hi! really awesome guide i just have a question: Is it possible to do all this in a way that my coworkers (i.e. the clients) can access the LAN IP addresses like a NAS, but would not pass through all their other internet traffic on my network?

[tzeweitan]

This is by far the best video I have seen, I have a question, how do revoke client certificates and also add a layer of user/password to client when connecting? Thanks in Advance!

[TravelThrive]

Sorry I mean you have a blog where you posted material on the subject, Is it fine by you if I use your screenshots for my own work where I need to describe but do not have the time to perform implementation right now.

[arnaldoreginatojr]

When i run the command "openssl req -days 3650 -nodes -new -x509 -extensions v3_ca -keyout certs\ca.key -out certs\ca.crt -config

The output is like this: "req: Use -help for summary"

[lukabrecelj]

Is it also possible to ping local network on network side (computers)?

[TravelThrive]

hi, it's ok if I use your screenshots in the video for further work?

[youssefk]

I installed openSSL as in the video, however, i cant find the openssl, cfg. any suggestions?

[lloydstott]

Hi. Please assist
openssl req -days 3650 -nodes -new -x509...
Error checking x509 extension section v3_ca

[ahmeduddin]

sir, at time line 21:08 you copy paste the command lines to create CA certificate.

but for me it's giving error

'openssl' is not recognized as internal or external command, openable program or batch file.

donno how you got this. please explain.

[danilozama]

When i run the command ca -days 3650 -extensions usr_cert -cert certs\ca.crt -keyfile certs\ca.key -out server.crt -infiles certs\server.csr" i have this error "Unable to load certificate request
C0110000:error:0480006C:PEM routines:get_name:no start CERTIFICATE REQUEST", can help me ?

[macky]

How can I connect using more than 3 clients?

[AmatoryFender]

Options error: Unrecognized option or missing or extra parameter(s) in server.ovpn:191: push (2.5.3)
Use --help for more information.

Help pls....