How do I change certificates on client VPN endpoint

Question

Hi,

I am trying to change the certificates used by a client VPN endpoint. I created a new authority and generated a server and a client certificate. I uploaded these certificates to the manager and associated the server certificate with the vpn endpoint but still am failing the TLS handshake when I try to connect.

One thing I am very confused about is why the VPN endpoint still shows in the console that it is associated with the expired client certificate. Why does it need to be associated with a client certificate at all? Did I specify this when I initially created the VPN and lock myself into using one client certificate?

Kidd Ip · Answer

Take this:

•	Create a new endpoint using: 
o	Your new server certificate ARN
o	Your new client certificate ARN
•	Reconfigure your target networks, authorization rules, and routes.
•	This is the only way to change the client certificate.

https://repost.aws/knowledge-center/client-vpn-tls-certificates

How do I change certificates on client VPN endpoint

Add your answer

Relevant content