AWS Client VPN Certs

Question

Using AWS Client VPN with the mutual authentication option via certs can we have separate client certs for each connecting machine or do they all have to use the same client cert?

Accepted Answer

Customers can create multiple Client Certificates as long as the CA of the certificate is the same and CVPN is aware of it.

`You only need to upload the client certificate to ACM when the Certificate Authority (Issuer) of the client certificate is different from the Certificate Authority (Issuer) of the server certificate`

So by associating the Client Cert with CVPN, you are telling CVPN what CA to trust.

AWS Client VPN Certs

Contenido relevante