Use Portal with Pure VPN Service

Users who have a VPN service from Pure VPN may experience issues with their Portal connecting to the service using their pre-defined .OVPN configuration files.

This is due to Portal requiring the CA Certificate and TLS Auth keys to be integrated into the main OVPN file you import into Portal under Web GUI -> VPN -> Client -> Add New OpenVPN Client; Pure VPN keeps these as separate files to add later.

You will need to make the following modifications to the Pure VPN OVPN files (downloadable from here) you chose to use before adding them to an OpenVPN profile on your Portal:

1. Select a Pure VPN server host (UDP server recommended) you wish to use from the ZIP library downloaded from the above link
2. Open the OVPN file in an editor such as Notepad++ on Windows or TextEdit / BBEdit on Mac
3. Some of the files contain an error in the server name, all entries should end in ".com" not ".net"; you must check the remote tag and make sure the server name specified is .com, and change it to this if not
4. Comment out the following three items by adding a # in front of them:
   

   ca ca.crt
   tls-auth Wdc.key 1
   explicit-exit-notify 2 (this option is not supported)

5. Integrate the "ca.crt" file from the downloaded ZIP file into your chosen OVPN file as follows:
   

   <ca>
   -----BEGIN CERTIFICATE-----
   MIIEoTCCA4mgAwIBAgIJANysBdFD6U2oMA0GCSqGSIb3DQEBBQUAMIGRMQswCQYD
   (…)
   o42I1wBOSZLTX1fO1gl3gAGS9aYg5o31rrpBKzQewitJgIuc+Q==
   -----END CERTIFICATE-----
   </ca>

6. Integrate the “Wdc.key” file from the downloaded ZIP file into your chosen OVPN file as follows:
   

   key-direction 1

   setenv CLIENT_CERT 0

   <tls-auth>
   -----BEGIN OpenVPN Static key V1-----
   e30af995f56d07426d9ba1f824730521
   (…)
   dd94498b4d7133d3729dd214a16b27fb
   -----END OpenVPN Static key V1-----
   </tls-auth>

7. Make sure there is one extra line break / carriage return at the end of the OVPN file, and save the file

You can now use this modified OVPN file with your Portal to create the needed VPN file.

Thank you,

Portal Support Team