0

What are the security concerns, when using OpenVPN and whole company has one client certificate, but for each client, it is exported with different password?

Should each client has its own certificate or is this solution acceptable to some degree?

Thank You

2
  • You need to give us more context. Please edit your question to better explain the network. Also, OpenVPN is usually configured on a server and it would be off-topic here, but you could ask about it on Server Fault for a business network, or on Super User for a personal network.
    – Ron Maupin
    Aug 21, 2018 at 13:59
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.
    – Ron Maupin
    Dec 25, 2018 at 9:22

2 Answers 2

2

The acceptability depends entirely on the VPN partner and your policies and risk assessment. Obviously, with one certificate, it will be difficult to know which user is connected to the VPN. If that's not a problem for you or your VPN partner, then it's not a problem.

2

Each client should have its own certificate. When you eventually need to revoke the certificate, you'll lock out all your clients. For example if someone leaves the company, or a certain computer is compromised, you'll want to revoke that client certificate without affecting the rest of the clients.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.