This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 25%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
How to connect to Azure Virtual Network Gateway Point to Site via iOS iPhone ?
I do not find Azure VPN Client on AppStore,
I have found OpenVPN on AppStore, but need to import .ovpn , but not have this when I try to download it from Azure Portal,
exist only xml file
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 37%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Hey Shlomi Rachamim, it sounds like you’ve set up a Point-to-Site gateway in Azure but you only see an XML profile (meant for the Azure VPN Client on Windows) when you download the VPN client package—and you need an .ovpn file to use OpenVPN on iOS. Here’s how to get that .ovpn and connect from your iPhone:
-----BEGIN CERTIFICATE----- lines) into the <cert> section <key> section That should get you up and running from iOS 11+. Let us know if you run into any issues or if you’re using Azure AD authentication instead of certificates—there’s a slightly different workflow for that.
Reference docs:
• Configure the OpenVPN client on iOS (cert auth): https://learn.microsoft.com/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-ios
• Configure OpenVPN clients for Azure VPN Gateway: https://supportability.visualstudio.com/AzureNetworking/_wiki/wikis/Wiki/330305/Azure VPN/Point to Site/How To/Client/Android & iOS/Configure OpenVPN Clients for Azure VPN Gateway
—
Follow-up questions (if you’re still stuck):
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 15%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPB%3C/text%3E%3C/svg%3E)
Hello Shlomi Rachamim
We understand you're trying to connect to your Azure Virtual Network Gateway (Point-to-Site) from an iOS device but can't find the Azure VPN Client in the App Store and only see an XML file when downloading the configuration.
The Azure VPN Client is not available for iOS devices; the XML file is meant for Windows/macOS clients and won't work on an iPhone. For iOS, Azure Point-to-Site connections use the OpenVPN protocol with a compatible OpenVPN client.
Make sure your Virtual Network Gateway is set to use the OpenVPN (SSL) tunnel type in the Azure portal. If OpenVPN isn't enabled, you'll only get the XML configuration file.
Once enabled, download the VPN client package again and extract the ZIP file to find a .ovpn configuration file in the OpenVPN folder.
Install an OpenVPN client app (like OpenVPN Connect) from the App Store, transfer the .ovpn file to your iPhone, and import it into the app to connect.
If your setup uses certificate-based authentication, install the client certificate (.pfx file) on your device as well.
Your setup uses Microsoft Entra ID authentication, this method works only with the OpenVPN protocol and is not compatible with IKEv2. So, enabling IKEv2 is unnecessary for iOS connectivity and won’t be used in this case.
To allow iPhone devices to connect, make sure OpenVPN (SSL) is enabled in the Point-to-Site settings of your Virtual Network Gateway. After that, download the VPN client package again from the Azure portal. The package will now include an OpenVPN folder with a .ovpn configuration file.
You can import this .ovpn file into an OpenVPN client app (like OpenVPN Connect) on your iOS device. Once the profile is imported, users should be able to connect to the VPN successfully.
IKEv2 can stay enabled if needed for other platforms like Windows or macOS, but it won’t be used for iOS devices when Microsoft Entra ID authentication is set up.
Please verify the tunnel type and re-download the package as the next step. Let us know if you need help with the configuration or OpenVPN profile.
As for now , We use P2S with Entra ID only'
so we need to enable additional the IKEv2 with OpenVPN?
current state:
I need to use this option? add the Azure certificate?
I
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 44%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
You cannot use Azure VPN Client on iOS (it’s only for Windows).
Recommendations:
Reconfigure Azure VPN Gateway → enable IKEv2 or OpenVPN → then download correct client profile for iOS.