Ricmedia PC Help

Tech Guides for Everyone

Connect VPN using L2TP/IPSec on Windows (all versions)

In this guide I will show you how to connect your Windows (all versions) PC/laptop to any VPN service that’s using the L2TP/IPsec protocol. L2TP over IPsec is a relatively common and secure protocol and most VPN service providers and workplaces will support it.

Before we start the connection setup process, you will need to find out the following details (best have them written or printed). If you are connecting to a paid VPN service, just login and your details and settings will be there. If you are connecting via a workplace, please contact your Network Administrator and ask them for the following details:

Required Info

  • Your VPN username
  • Your VPN password
  • The server name or IP address (ie. contoso.com or 102.562.243.12)
  • The pre-shared key (PSK)
    (PSK will be a series of characters like a password)
  • Optional or required encryption
  • The password protocol (PAP, CHAP, MSCHAP or EAP)

Once you have this info you can then watch the video above or follow the text guide below.

Connect via L2TP/IPsec to VPN on Windows

  1. Click on the Start icon Windows 10 Start Icon bottom-left of your screen
  2. Inside the search box, type Control Panel, then click on the first result
  3. Click on Network and Internet, then click Network and Sharing Center
  4. Now click on Set up a new connection or network link
  5. In the window that opens, select Connect to a workplace, then click Next
  6. Click on Use my Internet connection (VPN)
  7. Enter the server name or IP address into the Internet address box
  8. Enter a unique name you will recognize, ie Contoso (Work) or HomeVPN
  9. Leave the Use smart card check box unchecked
  10. (Windows 8.1 & 10) Leave Remember my credentials checked
  11. Leave Allow other people to use this connection unchecked (unless you trust everyone using the computer)
  12. (Windows VISTA, 7) Check the Don’t connect now checkbox
  13. Now click on Create (the window will now close)
  14. On the left pane, click on Change adapter settings
  15. Look for your new connection, then right-click on it, and choose Properties
  16. In the Properties window, select the Security tab
  17. For Type of VPN select Layer 2 Tunneling Protocol with IPsec (L2TP/IPsec)
  18. For Data encryption, select the encryption level your VPN service provider requires, if you’re unsure, select Require Encryption first, if you cannot connect, choose Optional Encryption
  19. For Authentication, select the method your VPN service provider requires, if you’re unsure, select Allow these protocols option, then check PAP, CHAP and MS-CHAP v2 check-boxes
  20. Now click the Advanced settings button, the Advanced Properties window will open
  21. Select the Use a pre-shared key for authentication option, then enter your pre-shared key, then click OK
  22. Finally click OK to close the Properties window
  23. For extra convenience, Right-click on your connection icon again and choose Create shortcut, choose Yes to the alert box. This will create a handy icon on your desktop.
  24. Now simply right-click on the connection icon and choose Connect/Disconnect
  25. Windows will tell you if the connection was successful
  26. If you have any errors or the connection was unsuccessful, double-check all settings or contact your VPN service provider or network administrator.
  27. All done!

Connect VPN using SSTP on Windows (all versions)

In this guide I will show you how to connect your Windows (all versions) PC/laptop to any VPN service that’s using the SSTP protocol. Secure Socket Tunneling Protocol is very secure and stable but only works on Windows computers. It can avoid firewalls because it runs over port 443 (SSL) which is rarely blocked because it’s used by all web browsers for secure browsing.

Before we start the connection setup process, you will need to find out the following details (best have them written or printed). If you are connecting to a paid VPN service, just login and your details and settings will be there. If you are connecting via a workplace, please contact your Network Administrator and ask them for the following details:

Required Info

  • Your VPN username
  • Your VPN password
  • The server name or IP address (ie. contoso.com or 102.562.243.12)
  • Optional or required encryption
  • The password protocol (PAP, CHAP, MSCHAP or EAP)

Once you have this info you can then watch the video above or follow the text guide below.

Connect via SSTP to VPN on Windows (all versions)

  1. Click on the Start icon Windows 10 Start Icon bottom-left of your screen
  2. Inside the search box, type Control Panel, then click on the first result
  3. Click on Network and Internet, then click Network and Sharing Center
  4. Now click on Set up a new connection or network link
  5. In the window that opens, select Connect to a workplace, then click Next
  6. Click on Use my Internet connection (VPN)
  7. Enter the server name or IP address into the Internet address box
  8. Enter a unique name you will recognize, ie Contoso (Work) or HomeVPN
  9. Leave the Use smart card check box unchecked
  10. (Windows 8.1 & 10) Leave Remember my credentials checked
  11. Leave Allow other people to use this connection unchecked (unless you trust everyone using the computer)
  12. (Windows VISTA, 7) Check the Don’t connect now checkbox
  13. Now click on Create (the window will now close)
  14. On the left pane, click on Change adapter settings
  15. Look for your new connection, then right-click on it, and choose Properties
  16. In the Properties window, select the Security tab
  17. For Type of VPN select Secure Socket Tunneling Protocol (SSTP)
  18. For Data encryption, select the encryption level your VPN service provider requires, if you’re unsure, select Require Encryption first, if you still cannot connect try Optional Encryption
  19. For Authentication, select the method your VPN service provider requires, if you’re unsure, select Allow these protocols option, then check PAP, CHAP and MS-CHAP v2 checkboxes
  20. Finally click OK to close the Properties window
  21. For extra convenience, Right-click on your connection icon again and choose Create shortcut, choose Yes to the alert box. This will create a handy icon on your desktop.
  22. Now simply right-click on the connection icon and choose Connect/Disconnect
  23. Windows will tell you if the connection was successful
  24. If you have any errors or the connection was unsuccessful, double-check all settings or contact your VPN service provider or network administrator.
  25. All done!
  26. NOTE* If you keep getting Error: 0x800B0109 see this guide

Connect VPN using OpenVPN on Windows (all versions)

In this guide I will show you how to connect your Windows (all versions) PC/laptop to any VPN service that’s using the OpenVPN protocol. The OpenVPN Protocol is a fast, secure and very stable protocol and most VPN service providers will support it.

Before we start the connection setup process, you will need to find out the following details (best have them written or printed). If you are connecting to a paid VPN service, just login and your details and settings will be there. If you are connecting via a workplace, please contact your Network Administrator and ask them for the following details:

Required Info

  • Your VPN username
  • Your VPN password
  • The OpenVPN configuration files (.ovpn) which will be available from your VPN service provider (you may need to login to your account to access the files) or network administrator.

Once you have this info you can then watch the video above or follow the text guide below.

Connect using OpenVPN to VPN on Windows

  1. Visit this link to download the OpenVPN Windows installer package https://openvpn.net/index.php/open-source/downloads.html
  2. Locate the downloaded program, right-click on it and choose Run as Administrator or choose to “Run” from your browser after it downloads
  3. Click Yes to allow the program to run, follow the app instructions to install
  4. Once the app is installed, download and find the OpenVPN configuration files from your VPN service provider (likely in a .zip folder) and unzip if necessary
  5. Enter the unzipped folder, then Ctrl + A to highlight all files, then Ctrl + C to copy
  6. Now enter the OpenVPN config folder, it will be located in C:\Program Files\OpenVPN\config
  7. Now Ctrl + V to paste the files into this folder, you may need to give Administrator permission for this, if so click Continue.
    NOTE* Windows VISTA & 7 users     you may need to alter file permissions on the config folder first, see this TechNet guide
  8. Now start the OpenVPN GUI app by going to Start Windows 10 Start Icon > All Programs > OpenVPN GUI
  9. Look for the OpenVPN taskbar icon as shown below and right-click on it (you may have to click the reveal arrow ^)
    OpenVPN Taskbar Icon
  10. You should now see either a single Connect item or multiple server locations, navigate to each and connect as required (see below)
    OpenVPN Connect Menu
  11. Once you click Connect, OpenVPN will attempt the connection and request your username and password so enter these as required
  12. OpenVPN will tell you if the connection was successful or not. For troubleshooting see this FAQ.
  13. All done!

Install X.509 Certificate for SSTP VPN on Windows

In this guide I will show you how to install an X.509 SSL encryption certificate (.crt) to connect to a VPN using the SSTP Protocol (aka MS-SSTP). SSTP is an excellent VPN protocol that easily traverses firewalls because it uses port 443 which is generally wide open to enable HTTPS secure web browsing. It’s also very fast for the same reason and offers good stability with minimal dropouts.

Before we begin there are a few requirements:

  • The X.509 security certificate file(s) available from your VPN provider or network admin
  • Administrator rights on your Windows PC (most accounts will have this)
  • *Note to Admins: the certificate name must match the hostname or the IP address of the server to work properly

Watch the video above or follow the text guide below.

Install X.509 Certificate for SSTP VPN

  1. Locate the X.509 .crt certificate files, unzip if required
  2. Click on the Start icon Windows 10 Start Icon bottom-left of your screen
  3. Type Run into the search box, then click the Run (Desktop app) result
  4. Now type MMC into the Open: text box, click Yes to allow the app to run
  5. The Microsoft Management Console window should now be open
  6. Go to File > Add/Remove Snap-in… then select Certificates and click Add >
  7. Select the Computer Account option, then click Next >
  8. Select the Local computer: (the computer this console is running on) option, then click Finish, then click OK to close the window
  9. On the left pane, expand folders to Certificates > Trusted Root Certification Authorities > Certificates
  10. Right click on Certificates, then click All tasks > Import (see below)Import X.509 Encryption Certificate on Microsoft Management Console
  11. In the Certificate Import Wizard, select the Local Machine option, then click Next
  12. Now click the Browse button and navigate to the downloaded certificate file (.crt) and double-click to select, then click Next
  13. Make sure that the Place all certificates in the following store: option is set to Trusted Root Certification Authorities (it’s usually the default) and click Next
  14. Now click Finish, then OK to the success alert message, finally close X the console window, choose No to the Save settings alert box
  15. You can now connect to the VPN server after setting up a new connection, see Connect VPN using SSTP on Windows (all versions) guide.

Fix Error: 0x800B0109

If you are trying to connect to a VPN using SSTP and keep getting Error 0x800B0109 on Windows XP/Vista/7 or “Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider” error on Windows 8.1/10, this is because you need to install X.509 SSL encryption certificate(s) for the server(s) you’re connecting to. These will be available from your VPN service providers website in the form of vpn.myvpn.crt Certificate files. Once you have them, continue this guide to install (video further below).

Note for Admins: If you are also getting this error whilst setting up your servers, you need to make sure that when generating your .CRT Certificate files, the Name: field must match exactly the hostname or IP address of your server. For instance, if your server hostname is us.sfc.myvpn.com then enter this for the Name: field on your certificate. You can also put the IP address of your server too.

Fix A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider error

Fix VPN SSTP error 0x800B0109

Connect VPN using OpenVPN on MAC OS X

In this guide I will show you how to connect your Apple MAC to any VPN service that’s using the OpenVPN protocol. OpenVPN is a fast, stable and secure protocol and most VPN service providers will support it.

Before we start the connection setup process, you will need to find out the following details (best have them written or printed). If you are connecting to a paid VPN service, just login and your details and settings will be there. If you are connecting via a workplace, please contact your Network Administrator and ask them for the following details:

Required Info

  • Your VPN username
  • Your VPN password
  • The OpenVPN configuration files (.ovpn, .tblk, .conf) you may need to login to your VPN service provider to access these files which will usually be in a .zip folder

Once you have this info you can then watch the video above or follow the text guide below.

Connect via OpenVPN to VPN on MAC OS X

  1. Download Tunnelblick for MAC OS X (choose the stable version) https://tunnelblick.net/downloads.html
  2. Locate the downloaded .dmg file, then right-click and Open
  3. The installation window will now be open, double click on the Tunnelblick icon to install, choose to Open in the security alert.
  4. Tunnelblick will now be installed
  5. Download and unzip your VPN service providers OpenVPN (.ovpn, .tblk, .conf) configuration files
  6. Enter the unzipped folder and select all, then drag all the .ovpn/.tblk/.conf config files on to the Tunnelblick icon top-right of your screen
    Drag OVPN Configuration file to Tunnelblick icon
  7. To connect, click the Tunnelblick icon top-right of your screen, then choose Connect to [vpn_name], to disconnect, click the Tunnelblick icon again and choose Disconnect [vpn_name]
  8. Tunnelblick will tell you if the connection was successful, if it wasn’t, contact your VPN service provider or network admin
  9. All done!