Set up OpenVPN in Windows

In this article, we will show you how to connect your Windows PC to your OpenVPN Server. We have already set up an OpenVPN server in this article.

IMPORTANT: The date on the router must be within the range of the installed certificates valid period. To prevent certificate verification issues, enable NTP synchronization on both the server and the client.

Here's a small video explaining the process:

 

First, download the OpenVPN Connect Client for Windows, officially maintained by OpenVPN. https://openvpn.net/client/

After you download the OpenVPN Windows client, you need to prepare all these files in a folder:

• the CA certificate (.crt)
• the Client certificate (.crt)
• the Client certificate key (.key)
• the configuration file (.ovpn)
• a file, named secret, containing the VPN username and password

Log in to your Mikrotik CHR via Webfig, and then go to System > Certificates. We'll export the Client certificate first by right-clicking it and select Export.

 

Enter a passphrase of your choice and click on "Export". You will get a key file with your Client certificate. 

RouterOS Command:

 

Then export the CA certificate without a passphrase.

RouterOS Command:

 

Click on Files. You will see the exported certificates and keys in the root directory. Download them by dragging them to a folder.

Then we need to create the secret file. In a text editor enter your VPN username on the first line and the password on the second line. Save it as secret.

Example secret file:

 

The last file we need to create is the OpenVPN configuration. In a text editor paste this example configuration, change the values according to your OpenVPN Server configuration and save it.

Example .OVPN configuration file:

 

Put all the needed files in a folder and start the OpenVPN Connect client. Click on FILE and drag the .ovpn configuration file to it.

 

Then confirm that everything is correct. You can choose to save the Private Key Password if you plan to connect to the server automatically. Then click on “Connect” to test your connection.

 

Enter the private key password.

 

And that’s it. Now you have a secure VPN connection to your network. To make it even more secure, remove the semicolon from the redirect-gateway line in your .ovpn file and reimport the profile.

You can later access and control it from the icon at the taskbar.

Check our powerful Mikrotik Cloud Hosted routers here: https://www.bgocloud.com/hosting/mikrotik-vps