SoftEther VPN User Forum

Posted: **Mon Nov 28, 2022 12:58 pm**

Hi dear guys

how can i connect to my server using sstp vpn on windows 10/11 ?

im currently successfully connected to server using mobile android app, called VPN Client Pro.
but in windows i cant connect due a certificate error, message like this

A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

it seems i have to install server certificate on windows machine, where i can get it?

on mobile application , it downloads automatically , my guess.

thank you in advance for any help.

UPDATE: fixed , thnaks to aliosciaco27 .the solution link https://www.vpnusers.com/viewtopic.php? ... 932#p97462

Posted: **Mon Nov 28, 2022 1:35 pm**

HI,
You have to export from SE server and import in windows machine.

Posted: **Mon Nov 28, 2022 1:37 pm**

* the certificate
Sorry

Posted: **Mon Nov 28, 2022 3:59 pm**

aliosciaco27 wrote: ↑
Mon Nov 28, 2022 1:35 pm
HI,
You have to export from SE server and import in windows machine.

thanks for your help,i know have to export the certificate, btw from where? where is located?

Posted: **Tue Nov 29, 2022 7:27 am**

HI,
connect to your se vpn server, click on "Encryption and Network", if not yet, create a New cert with Common Name the same as you public IP or Dns name, after that export it (save as x509 cert...), then import it in windows machine, in "Trusted Root Certification Authorities" (local computer certificates).
Hope that helps.

Posted: **Tue Nov 29, 2022 7:35 am**

Sorry, I forgot:
Connect to your virtual hub, click on "Trusted CA Certificates", then Add here too the certificate previously created.

Posted: **Tue Nov 29, 2022 10:22 am**

thank you, its working

Step by Step - Newbee tutorials - How to Connect SSTP Connection on Windows 10/11

SERVER SIDE [ SoftEther VPN Server Manager ]

create a new certificate form Encryption and Network Settings
a: set Encryption Algorithm Name as AES128-SHA
b: set New Certificate

Code: Select all

[b]Root Certificate (Self-Signed Certificate)[/b]

Common Name(CN): 74.74.74.74
Organization (O):SmartStart
Organization Unit(OU): Meow
Counter (C):DE
State(ST): FK
Locale(L):DE
SerialNumber (Hexadecimal):12345798ab
Expires in:3650
Strengthens = 4096 bits

hit [b]OK[/b].

c: Export > Save as X509 Certificate to MyServer.cert and MyServer.key
d: Import > MyServer.cert Certificate

hit OK.

+--------------------------------
Client Side [Windows 10/11]
a: Installing Server certificate
open certificate file [ MyServer.cert ] on windows
click on Install Certificate...
click on Local Machine , Next
click on Place all certificates in the following store , click on Browse...
click on Select Trusted Root Certification Authorities, OK
click on Next > Finish

b: Setup Connection
search "Add a vpn connection" in start menu and click on it. or goto Network & Internet > VPN
add VPN
VPN Provider = Windows (built-in)
Connection Name = MyVPN , as you wish
Server Name or Address = public ip address as you entered on CERT file. 74.74.74.74
VPN Type = Secure Socket Tunneling Protocol (SSTP)
Type of sign-in info = Username and password
Username= type your user name as created in your virtual hub on server
Password= type your password as created in your virtual hub on server

Hit Save, and Connect.

SoftEther VPN User Forum

Connect To Softether Using Win10 Built IN SSTP VPN

Connect To Softether Using Win10 Built IN SSTP VPN

Re: Connect To Softether Using Win10 Built IN SSTP VPN

Re: Connect To Softether Using Win10 Built IN SSTP VPN

Re: Connect To Softether Using Win10 Built IN SSTP VPN

Re: Connect To Softether Using Win10 Built IN SSTP VPN

Re: Connect To Softether Using Win10 Built IN SSTP VPN

Re: Connect To Softether Using Win10 Built IN SSTP VPN