# go to openvpn folder cd /usr/local/etc/openvpn/easy-rsa/ # create client cert request /usr/local/etc/openvpn/easy-rsa/easyrsa gen-req [clientname] # sign the client certificate /usr/local/etc/openvpn/easy-rsa/easyrsa sign client [clientname] **combine the ca cert, user cert, ta cert and user private key into the ovpn file as a single file**