'
12.2020
-----BEGIN CERTIFICATE----- MIIEKTCCAxGgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UEBhMCREUx ... HqrtWy/eXrvxBk5cqsjMsiid7KYZqGxQeli9aQBByMXLD+W+5zV/EOZ3q0eXGUUY JFnpVtR5miRxSVYMqq8JlrdYMPcjKhcf3WSru/Shj/AA+dCIFEzp2EtIuK3K6Jtu lEAa+0y24V6nS/L9/g== -----END CERTIFICATE-----
-----BEGIN CERTIFICATE----- MIIDcTCCAlmgAwIBAgIQYPOoN8oxQJWEuJgFzrQbIDANBgkqhkiG9w0BAQsFADCB rjELMAkGA1UEBhMCREUxFjAUBgNVBAgMDU5pZWRlcnNhY2hzZW4xEjAQBgNVBAcM ... laXtTQtA4IdGFStIM0srNe81F611kvaJLu71J9ar4Qvndo2RzhkXt/4zVgsaDzhP Zq2NuIvXEHzO/tNjJZDVA/dgfOXd -----END CERTIFICATE-----
-----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCjZZtl4wlvv9Th ... CtpYImI8O795Bwn2HABjYufe3iDNrc418P5Sdem/dIOV4YvNTPTaS/kgCY7xMQ8N JNAkJ4lGIfi4AREvV7Y/pg4= -----END PRIVATE KEY-----
remote {your.server.com} 443 tcp
route {ip to route into tunnel} 255.255.255.255 vpn_gateway
dhcp-option DNS 192.168.123.1
dev tun
cipher AES-128-CBC
auth SHA256
tun-mtu 1500
persist-key
username password
Template
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>IPv4</key>
<dict>
<key>OverridePrimary</key>
<integer>0</integer>
</dict>
<key>PayloadDescription</key>
<string>Configures VPN settings</string>
<key>PayloadDisplayName</key>
<string>VPN</string>
<key>PayloadIdentifier</key>
<string>com.apple.vpn.managed.5313ec66-a3c0-422c-932d-ef4d4ebb3b18</string>
<key>PayloadType</key>
<string>com.apple.vpn.managed</string>
<key>PayloadUUID</key>
<string>5313ec66-a3c0-422c-932d-ef4d4ebb3b18</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>Proxies</key>
<dict>
<key>HTTPEnable</key>
<integer>0</integer>
<key>HTTPSEnable</key>
<integer>0</integer>
</dict>
<key>UserDefinedName</key>
<string>{Insert any identifier}</string>
<key>VPN</key>
<dict>
<key>AuthenticationMethod</key>
<string>Certificate</string>
<key>PayloadCertificateUUID</key>
<string>5e2de92b-4b5f-4bfd-8074-47bad6c64183</string>
<key>DisconnectOnIdle</key>
<integer>0</integer>
<key>OnDemandEnabled</key>
<integer>1</integer>
<key>OnDemandRules</key>
<array>
<dict>
<key>Action</key>
<string>Connect</string>
</dict>
</array>
<key>RemoteAddress</key>
<string>DEFAULT</string>
</dict>
<key>VPNSubType</key>
<string>de.securepoint.ms.agent</string>
<key>VPNType</key>
<string>VPN</string>
<key>VendorConfig</key>
<dict id="vendorConfig">
<key>auth-user-pass</key>
<string>{username}\n{{c|{password}|r]]</string>
<key>ca</key>
<string>-----BEGIN CERTIFICATE-----\n{MIIEKTCCAxGgAwIBAgIBAD.... The CA certificate which signed the VPN server Certificate ....0y24V6nS/L9/g==}\n-----END CERTIFICATE-----\n</string>
<key>remote.1</key>
<string>{VPN server hostname} {VPN server port}</string>
<key>proto.1</key>
<string>{VPN server protocol (udp or tcp)}</string>
<key>redirect-gateway</key>
<string>def1</string>
<key>dev</key>
<string>tun</string>
<key>cipher</key>
<string>AES-128-CBC</string>
<key>auth</key>
<string>SHA256</string>
<key>tun-mtu</key>
<string>1500</string>
</dict>
</dict>
<dict>
<key>PayloadCertificateFileName</key>
<string>Client Certificate</string>
<key>PayloadContent</key>
<data>{MIIPsQIBAzCCD... Client Certificate in PKCS12 format ...pLfEEheyrqcCAwGGoA==}</data>
<key>PayloadDisplayName</key>
<string>Client Certificate</string>
<key>PayloadIdentifier</key>
<string>Client Certificate</string>
<key>PayloadType</key>
<string>com.apple.security.pkcs12</string>
<key>PayloadUUID</key>
<string>5e2de92b-4b5f-4bfd-8074-47bad6c64183</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>Password</key>
<string>{Password to access the PKCS12 container}</string>
<key>PayloadDescription</key>
<string>Adds a PKCS12-formatted certificate</string>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>{Identifier in IOS settings for the certificate}</string>
<key>PayloadIdentifier</key>
<string>vpn.configuration</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>a4d7f358-f9a3-42e2-8083-5b26cccab6e2</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>