Select a Certificate and Enter the PIN

Applies To: Locally-managed Fireboxes

If you use certificates for authentication, you must add the correct certificate and then configure the Mobile VPN connection profile to use that certificate.

To add a certificate to the Mobile VPN client profile, you must have a cacert.pem and a .p12 file.

Configure the Certificate in the Windows client

Add the certificate:

  1. Start the WatchGuard Mobile VPN Client.
  2. Select Configuration > Certificates.
  3. Click Add.
  4. On the User Certificate tab, select from PKS#12 file from the Certificate drop-down list.
  5. Adjacent to the PKS#12 Filename text box, click the button and browse to the location of the .p12 file.
  6. Click OK. Click Close.

Select the certificate for the Mobile VPN profile:

  1. Select Configuration > Profiles.
  2. Select the profile name. Click Edit.
  3. Click Identities.
  4. From the Certificate configuration drop-down box, select the certificate configuration you added.
  5. Select Connection > Enter PIN.
  6. Type the passphrase and click OK.

Configure the Certificate in the macOS Client

Add the certificate:

  1. Start the WatchGuard Mobile VPN Client.
  2. Select WatchGuard Mobile VPN > Preferences
    The list of certificates appears.
  3. Click "+" to add a new certificate.
  4. Type a name for the certificate.
  5. From the Certificate drop-down list, select from PKS#12 file.
  6. Adjacent to the PKS#12 Filename text box, click the button and browse to the location of the .p12 file.
  7. Click OK.
  8. Close the Preferences dialog box.

Select the certificate for the Mobile VPN profile:

  1. Select WatchGuard Mobile VPN > Profiles.
  2. Select the profile name. Click Edit.
  3. Click Identities.
  4. From the Certificate configuration drop-down box, select the certificate configuration you added.
  5. Click OK.
  6. Close the Profiles dialog box.
  7. Select Connection > Enter PIN.
  8. Type the passphrase and click OK.