Ok I have 2 solutions, hopefully the first one works for you.
I seem to have found the issue, You cannot use brackets, once I removed this "(IPSEC)" from my customers profile connection name everything works fine again. grrrr!!!
Second Method....LONG way
Assumptions I assume you
* have a running Astaro server;
* OpenSSL installed on a work station;
* users already set-up; and
* VPN previously configured and working
Step 1 - Download and Install iPCU Download and install the iPhone Configuration Utility. This allows you to generate your own iPhone profiles to be installed by users. Download here:
Apple - Support - iPhone - Enterprise Step 2 - Download VPN Signing CA and Users Cert Login to your Astaro web admin and in the left hand menu click:
Remote Access > Certificate Management
In the right hand pane scroll down till you see your users certificate, mine was called rjet (X509 User Cert), click download and export as PKCS#12. Remember to use a password as this file contains the users private key. Save this file to your desktop.
Navigate to Certificate Authority, form here choose to download the VPN Signing CA, you will need to export the file as .pem, you will later convert this to .crt so the iPCU can understand use it. Save this file to your desktop
Step 3 - Convert VPN Signing CA from .pem to .crt You will need to have OpenSSL installed, most *nix (i.e. OS X and Ubuntu/Fedora) have this pre-installed.
In terminal navigate to your desktop and run the following command over your VPN Signing CA, mine is called VPNCA.pem
openssl x509 -in VPNCA.pem -inform PEM -outform DER -out VPNCA.crt
Step 4 - Create iPhone Profile Run the iPhone configuration Utility, navigate to “Configuration Profiles” and click “New”
In the General Section fill in everything i.e :
* Name: Work VPN
* Identifier: rjet.vpn.company-a.com
* Organization: company-a.com
* Description: This is your personalized Remote Access VPN configuration. Please continue by clicking the "Install" buttons
* Security: Always
Click the Credentials Section and click the (+) button on the right, you will need to add both the rjet.p12 file and your VPNCA.crt
Click the VPN Section and fill in the fields, example are:
* Connection Name: My VPN
* Connection Type: Must be IPsec (Cisco)
* Server: Must be a hostname of Astaro Box. i.e vpn.company-a.com
* Account: rjet
* Machine Authentication: Certificate
* Credentials: rjet.p12
Click save.
You can now deploy this profile using the iPhone cable directly attached the device or send the profile to an email address or install via Safari.
Ok I have 2 solutions, hopefully the first one works for you.
I seem to have found the issue, You cannot use brackets, once I removed this "(IPSEC)" from my customers profile connection name everything works fine again. grrrr!!!
Second Method....LONG way
Assumptions I assume you
* have a running Astaro server;
* OpenSSL installed on a work station;
* users already set-up; and
* VPN previously configured and working
Step 1 - Download and Install iPCU Download and install the iPhone Configuration Utility. This allows you to generate your own iPhone profiles to be installed by users. Download here:
Apple - Support - iPhone - Enterprise Step 2 - Download VPN Signing CA and Users Cert Login to your Astaro web admin and in the left hand menu click:
Remote Access > Certificate Management
In the right hand pane scroll down till you see your users certificate, mine was called rjet (X509 User Cert), click download and export as PKCS#12. Remember to use a password as this file contains the users private key. Save this file to your desktop.
Navigate to Certificate Authority, form here choose to download the VPN Signing CA, you will need to export the file as .pem, you will later convert this to .crt so the iPCU can understand use it. Save this file to your desktop
Step 3 - Convert VPN Signing CA from .pem to .crt You will need to have OpenSSL installed, most *nix (i.e. OS X and Ubuntu/Fedora) have this pre-installed.
In terminal navigate to your desktop and run the following command over your VPN Signing CA, mine is called VPNCA.pem
openssl x509 -in VPNCA.pem -inform PEM -outform DER -out VPNCA.crt
Step 4 - Create iPhone Profile Run the iPhone configuration Utility, navigate to “Configuration Profiles” and click “New”
In the General Section fill in everything i.e :
* Name: Work VPN
* Identifier: rjet.vpn.company-a.com
* Organization: company-a.com
* Description: This is your personalized Remote Access VPN configuration. Please continue by clicking the "Install" buttons
* Security: Always
Click the Credentials Section and click the (+) button on the right, you will need to add both the rjet.p12 file and your VPNCA.crt
Click the VPN Section and fill in the fields, example are:
* Connection Name: My VPN
* Connection Type: Must be IPsec (Cisco)
* Server: Must be a hostname of Astaro Box. i.e vpn.company-a.com
* Account: rjet
* Machine Authentication: Certificate
* Credentials: rjet.p12
Click save.
You can now deploy this profile using the iPhone cable directly attached the device or send the profile to an email address or install via Safari.
