# OpenVPN - Create a new user

To follow this procedure you need administrative access to the OPNSense firewall.

##### **Create user**

- Navigate to: 
    - System -> Access -> User
- Click on the + (Add) button

This will open a form where you can configure the new user.

##### **Configure User Details**

Fill in the required fields:

- **Username**
- **Password**
- (Optional) Description or additional details

These credentials will be used by the user to connect to the VPN.

[![image.png](https://kb.artera.net/uploads/images/gallery/2026-04/scaled-1680-/3Bk6te88vpqQsjnQ-image.png)](https://kb.artera.net/uploads/images/gallery/2026-04/3Bk6te88vpqQsjnQ-image.png)

<p class="callout warning">It's fundamental to add the user to the vpn\_users group under Group membership.  
Without this step, the user will not be able to access the VPN.</p>

##### **Create / Assign User Certificate**

To allow OpenVPN authentication, a certificate must be associated with the user.

- Navigate to: 
    - Trust -&gt; **Certificates** section
    - Click **“+ Add”**

Fill in the fields:

- **Description**: name.surname
- **Issuer**: select your CA (e.g. *OpenVPN-auth*)
- **Lifetime**: 18262
- **Common name**: name.surname

Save the certificate.

[![image.png](https://kb.artera.net/uploads/images/gallery/2026-04/scaled-1680-/FhMMi6vjeSQQHt8R-image.png)](https://kb.artera.net/uploads/images/gallery/2026-04/FhMMi6vjeSQQHt8R-image.png)

##### **Export OpenVPN Configuration**

After creating the user you can now generate the client configuration file.

- Go to:  
    **VPN → OpenVPN → Client Export**

You will see the list of users where you can download the configuration, it will download a .ovpn file.

##### <span role="text">**Install and Configure OpenVPN Client**</span>

On the user’s device:

1. Install the **OpenVPN client**  
    (Windows / macOS / Linux / Mobile)
2. Import the `.ovpn` file
3. Enter: 
    - **Username**
    - **Password**