| title | Generate & export certificates for P2S User VPN: MakeCert |
|---|---|
| titleSuffix | Azure Virtual WAN |
| description | Learn how to create a self-signed root certificate for User VPN, export a public key, and generate client certificates using MakeCert. |
| author | cherylmc |
| ms.service | azure-virtual-wan |
| ms.topic | how-to |
| ms.date | 03/20/2025 |
| ms.author | cherylmc |
This article shows you how to create a self-signed root certificate and generate client certificates using MakeCert. The steps in this article help you create .pfx and .cer files. For .pem files, see Generate .pem certificate files.
Note
We recommend using the PowerShell steps instead to create your certificates. We provide these MakeCert instructions as an optional method.
MakeCert is deprecated. This means that this tool could be removed at any point. Certificates that you already generated using MakeCert aren't affected if MakeCert is no longer available. MakeCert is only used to generate the certificates, not as a validating mechanism.
[!INCLUDE Steps]
[!INCLUDE Export client certificate]
To install a client certificate, see Install a client certificate.
Continue with your Point-to-Site configuration. See Create a P2S User VPN connection using Azure Virtual WAN.