Editing Futotemporarywikipage (section)

==== 2.2 - Creating the OpenVPN Server Certificate ====

Next, create the server certificate that the OpenVPN server will use for secure client connections.

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxb9s_tmp_bfc83cc1.png
File:lu55028jxb9s_tmp_fe565fd6.png
File:lu55028jxb9s_tmp_ffd201ba.png
</gallery>

<ol style="list-style-type: decimal;">
<li><p>Navigate to the <code>Certificates</code> tab in Cert Manager.</p>
<ul>
<li>'''Add a New Server Certificate:'''</li></ul>
</li>
<li><p>Click '''+ Add/Sign''' to create a new certificate.</p></li>
<li><p>'''Fill in the Server Certificate Details:'''</p>
<ul>
<li><p>'''Method:''' Create an Internal Certificate</p></li>
<li><p>'''Descriptive Name:''' OpenVPN-ServerCert – name it something that makes it easy to identify as a '''SERVER''' certificate later for OpenVPN</p></li>
<li><p>'''Certificate Authority:''' Select OpenVPN-CA (the CA you just created)</p></li>
<li><p>'''Key Length:''' 4096 bits</p></li>
<li><p>'''Digest Algorithm:''' SHA-512</p></li>
<li><p>'''Certificate Type:''' Server Certificate.</p>
<blockquote><p>'''WARNING:''' Make sure you do not leave this set to user certificate, which is the default option.</p></blockquote></li>
<li><p>'''Lifetime (days):''' 3650</p></li>
<li><p>'''Distinguished Name:''' Match the details you used for the CA</p></li>
<li><p>'''Common Name:''' louis.chickenkiller.com (you can use whatever you put for your dynamic DNS domain name here)</p></li></ul>
</li>
<li><p>Click '''Save'''. You should now see OpenVPN-ServerCert listed under the Certificates tab.</p></li></ol>

<span id="create-a-vpn-group-for-your-vpn-users"></span>