Client Support Area

Client Support


Requires Windows XP or Newer
Requires OS X 10.6 or Newer



Client Control Panel




private internet access PPTP VPN Instant Setup Guides [!]

private internet access Buy a Pre-Configured Router

private internet access Port Forwarding
    Enable port forwarding in the application by entering the Advanced area, enabling port forwarding and selecting one of the following gateways:

    Netherlands
    Switzerland
    CA North York
    CA Toronto
    Romania
    Sweden
    France
    Germany

    After enabling port forwarding and re-connecting to one of the above gateways, please hover your mouse over the System Tray or Menu Bar icon to reveal the tooltip which will display the port number. You can then enter this port into your software.

    Port Forwarding reduces privacy. For maximum privacy, please keep port forwarding disabled.

private internet access Regional Gateways
  • United States (US VPN)
    us-midwest.privateinternetaccess.com
    us-east.privateinternetaccess.com
    us-west.privateinternetaccess.com
    us-texas.privateinternetaccess.com
    us-california.privateinternetaccess.com
    us-florida.privateinternetaccess.com

  • Canada (CA VPN)
    ca.privateinternetaccess.com
    ca-toronto.privateinternetaccess.com

  • United Kingdom (UK VPN)
    uk-london.privateinternetaccess.com
    uk-southampton.privateinternetaccess.com

  • Switzerland (Swiss VPN)
    swiss.privateinternetaccess.com

  • Netherlands (NL VPN)
    nl.privateinternetaccess.com

  • Sweden (SE VPN)
    sweden.privateinternetaccess.com

  • France (FR VPN)
    france.privateinternetaccess.com

  • Germany (DE VPN)
    germany.privateinternetaccess.com

  • Romania (RO VPN)
    ro.privateinternetaccess.com

  • Hong Kong (HK VPN)
    hk.privateinternetaccess.com

private internet access Advanced OpenVPN SSL Usage Guides

private internet access IPSEC / L2TP [!]
private internet access Internet Kill Switch
    The internet kill switch activates VPN disconnect protection. If you disconnect from the VPN, your internet access will stop working. It will reactivate normal internet access when you deactivate the kill switch mode or exit the application.

    Users who may be connected to two connections simultaneously (ex.: wired and wireless) should not use this feature, as it will only stop 1 active connection type.


private internet access DNS Leak Protection
    The dns leak protection feature activates VPN dns leak protection. This ensures that DNS requests are routed through the VPN. This enables the greatest level of privacy and security but may cause connectivity issues in non-standard network configurations.

    This can be enabled and disabled in the Windows application, while it is enabled by default on our Mac OS X application.

    We use our own private DNS servers for your DNS queries while on the VPN. After connecting we set your operating system's DNS servers to 209.222.18.222 and 209.222.18.218. When using a DNS Leak testing site you should expect to see your DNS requests originate from the IP of the VPN gateway you are connected to.

    If you change your DNS servers manually or if for some other reason they are changed this does not necessarily mean your DNS is leaking. Even if you use different DNS servers the queries will still be routed through the VPN connection and will be anonymous.


private internet access IPv6 Leak Protection
    IPv6 leak protection disables IPv6 traffic while on the VPN. This ensures that no IPv6 traffic leaks out over your normal internet connection when you are connected to the VPN. This includes 6to4 and Teredo tunneled IPv6 traffic. This will not block IPv6 on Windows XP if you have manually enabled it.


private internet access SOCKS5 Proxy [!]
    Although quite different from a VPN, we provide a SOCKS5 Proxy with all accounts in the event users require this feature.

    SOCKS5 Proxy
    proxy-nl.privateinternetaccess.com port 1080

private internet access PPTP/L2TP/SOCKS Security
    The PPTP/L2TP/SOCKS5 protocols are provided for devices lacking compatibility with the Private Internet Access application or OpenVPN protocol. PPTP/L2TP/SOCKS5 should be used for masking one's IP address, censorship circumvention, identity protection and geolocation.

    If you need encryption, please use the Private Internet Application or OpenVPN protocol with our service.

Windows VPN Client Windows 7: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click Start -> Control Panel
  3. In the Control Panel, click View network status and tasks under Network and Internet
  4. Under Change your networking settings, click Set up a new connection or network
  5. In the Set Up a Connection or Network window, select Connect to a workplace and click Next
  6. In the Connect to a Workplace window, click on Use my Internet connection (VPN)
  7. In the Internet address: field, type us-california.privateinternetaccess.com [*]
  8. In the Destination name: field, type Private Internet Access
  9. After double checking the fields, click Next
  10. In the User name: field, enter your supplied username
  11. In the Password: field, enter your supplied password
  12. Some users may select Remember this password
  13. Click Connect

Windows VPN Client Windows Vista: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click Start -> Connect to
  3. In the Connect to a network window, click Set up a connection or network
  4. In the next window, select Connect to a workplace and click Next
  5. In the next window, click on Use my Internet connection (VPN)
  6. In the Internet address: field, type us-california.privateinternetaccess.com [*]
  7. In the Destination name: field, type Private Internet Access
  8. After double checking the fields, click Next
  9. In the User name: field, enter your supplied username
  10. In the Password: field, enter your supplied password
  11. Some users may select Remember this password
  12. Click Connect

Windows VPN Client Windows XP: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click Start -> Control Panel
  3. In the Control Panel window, doublie click Network Connections
  4. In the next window, click Create a new connection
  5. In the Network Connection Wizard window, click Next
  6. In the next window, select Connect to the network at my workplace and click Next
  7. In the next window, select Virtual Private Connection and click Next
  8. In the Company Name field, enter Private Internet Access and click Next
  9. In the Host name or IP address field, enter us-california.privateinternetaccess.com [*] and click Next
  10. Some users may select Add a shortcut to this connection on my desktop
  11. Click Finish
  12. In the User name: field, enter your supplied username
  13. In the Password: field, enter your supplied password
  14. Click Connect

Windows VPN Client Windows 7: VPN L2TP/IPSec+PSK Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click Start -> Control Panel
  3. In the Control Panel, click View network status and tasks under Network and Internet
  4. Under Change your networking settings, click Set up a new connection or network
  5. In the Set Up a Connection or Network window, select Connect to a workplace and click Next
  6. In the Connect to a Workplace window, click on Use my Internet connection (VPN)
  7. In the Internet address: field, type us-california.privateinternetaccess.com [*]
  8. In the Destination name: field, type Private Internet Access L2TP
  9. Select Don't connect now; just it up so I can connect later.
  10. After double checking the fields, click Next
  11. In the User name: field, enter your supplied username
  12. In the Password: field, enter your supplied password
  13. Some users may select Remember this password
  14. Click Create
  15. Close the window - make sure not to hit Connect.
  16. In the Network and Sharing Center, click Change Adapter Settings on the left.
  17. Right click on Private Internet Access L2TP and click Properties
  18. Select the Options tab and deselect Include Windows logon domain
  19. Select the Security tab and in Type of VPN choose Layer 2 Tunneling Protocol with IPSec (L2TP/IPsec)
  20. In the Data encryption choose Maximum strength encryption
  21. Underneath, choose Allow these protocols and make sure only Microsoft CHAP Version 2 is selected.
  22. Click the Advanced Settings button in the same area (the Security tab)
  23. Enter the pre shared key mysafety
  24. Click Ok.
  25. Finally, click the Networking tab and disable all the connections except Internet Protocol Version 4
  26. Click Ok and your L2TP/IPSec+PSK for Windows 7 setup will be complete.
  27. You can now connect to it.
  28. (If it does not work, please visit http://support.microsoft.com/kb/926179 and apply this fix.)

MacOSX VPN Setup Mac OS X 10.4: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Go to Applications and open Internet Connect
  3. In the Internet Connect application, click File -> New VPN Connection
  4. In the next prompt, select PPTP and click Continue
  5. In the VPN (PPTP) window, make sure Configuration: is set to Other
  6. In the Server address: field, enter us-california.privateinternetaccess.com [*]
  7. In the Account Name: field, enter your supplied username
  8. In the Password: field, enter your supplied password
  9. Some users may select Show VPN status in menu bar
  10. Click Connect

MacOSX VPN Setup Mac OS X 10.5+: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click the Apple Menu in the upper left corner
  3. Click on System Preferences
  4. In the System Preferences window, click Network
  5. In the Network window, click the Lock and enter your password.
  6. Click + to add a new connection.
  7. In the following prompt, for Interface: select VPN
  8. In the VPN Type:, select PPTP
  9. In the Service Name: field, enter Private Internet Access
  10. Click Create
  11. In the Server Address: field, enter us-california.privateinternetaccess.com [*]
  12. In the Account Name: field, enter your supplied username
  13. Make sure Encryption: is set to Automatic (128 bit or 40 bit)
  14. Click Authentication Settings
  15. In the Password: field, enter your supplied password
  16. Click Ok
  17. Click the Advanced button
  18. Make sure to select Send all traffic over VPN connection
  19. Click Connect

iPhone 3 iPad iTouch PPTP VPN Setup iPhone 3 / iTouch / iPad PPTP: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Open the Settings application
  3. Click on General
  4. Click on Network
  5. Click on VPN
  6. Click on Add VPN Configuration
  7. Select PPTP
  8. In the Description field, enter Private Internet Access
  9. In the Server field, enter us-california.privateinternetaccess.com [*]
  10. In the Account field, enter your supplied username
  11. In the Password field, enter your supplied password
  12. Ensure that Send All Traffic is set to ON
  13. Ensure that Encryption is set to Auto
  14. Click Save
  15. Press the Home button
  16. Open the Settings application
  17. Click on VPN
  18. Click on Private Internet Access
  19. Set VPN to ON

iPhone 4 L2TP VPN Setup iPhone 4 L2TP VPN Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Open the Settings application
  3. Click on General
  4. Click on Network
  5. Click on VPN
  6. Click on Add VPN Configuration
  7. Select L2TP
  8. In the Description field, enter Private Internet Access
  9. In the Server field, enter us-california.privateinternetaccess.com [*]
  10. In the Account field, enter your supplied username
  11. In the Password field, enter your supplied password
  12. In the Secret field, enter mysafety
  13. Ensure that Send All Traffic is set to ON
  14. Click Save
  15. Press the Home button
  16. Open the Settings application
  17. Click on VPN
  18. Click on Private Internet Access
  19. Set VPN to ON

Android PPTP VPN Setup Android PPTP: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Open Settings and click on Wireless Controls
  3. Click on VPN Settings
  4. Click on Add VPN
  5. Click on Add PPTP VPN
  6. In the VPN Name field, enter Private Internet Access
  7. In the Set VPN Server field, enter us-california.privateinternetaccess.com [*]
  8. Make sure PPTP Encryption is enabled.
  9. Click Save
  10. Open Settings and click on Wireless Controls
  11. Click on Private Internet Access
  12. In the Username: field, enter your supplied username
  13. In the Password: field, enter your supplied password
  14. Some users may select Remember username
  15. Click Connect

Linux VPN Setup Ubuntu Linux 10.10: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click on the Network Manager in your top panel
  3. Go to VPN Connections -> Configure VPN
  4. Click Add
  5. In the prompt, select Point-to-Point Tunneling Protocol (PPTP)
  6. In the Connection name: field, enter Private Internet Access
  7. In the Gateway: field, enter us-california.privateinternetaccess.com [*]
  8. In the User name: field, enter your supplied username
  9. In the Password: field, enter your supplied password
  10. Click on the Advanced button
  11. In the PPTP Advanced Options window, ensure Use Point-to-Point encryption (MPPE) is selected
  12. Click Ok
  13. Click on the Network Manager in your top panel
  14. Go to VPN Connections -> Private Internet Access

Windows OpenVPN VPN Setup Windows: OpenVPN Setup

  1. Download the OpenVPN Windows Installer
  2. Run the installer and click Ok or Yes if any Security Warnings appear.
  3. Continue and write down the installation folder path.
  4. Download the OpenVPN Configuration files.
  5. Extract the files from the zip and copy ca.crt, crl.pem and all of the configuration files to the config folder found in the installation path from Step 3 (Usually C:\Program Files\OpenVPN\config or C:\Program Files (x86)\OpenVPN\config).
  6. Windows 7 and Vista users will need to right click on the OpenVPN shortcut on the desktop and choose Properties and enable Run this program as an administrator.
  7. Connect by right clicking the OpenVPN System Tray Icon, navigating to the server and choosing connect.
  8. When you are prompted, enter your username and password.

Mac OS X OpenVPN VPN Setup Mac OS X: OpenVPN Setup

  1. Download Tunnelblick from Google Code
  2. Download the OpenVPN Configuration files.
  3. Extract ca.crt, crl.pem and configuration files from the zip.
  4. Open the Tunnelblick DMG
  5. Double click on the Tunnelblick Icon.
  6. After installation has completed, launch Tunnelblick.
  7. When you see a dialogue box with an option to Create and open configuration folder, choose this option.
  8. Copy the files extracted in Step 3 to this folder.
  9. Connect by right clicking the Tunnelblick icon in the menubar.
  10. When you are prompted, enter your username and password.

Mac OS X Viscosity VPN Setup Mac OS X: Viscosity Setup

  1. Download Viscosity from http://www.thesparklabs.com/downloads/Viscosity.dmg
  2. Open the Viscosity.dmg file (usually located in your Downloads folder) by double-clicking it
  3. Drag Viscosity to your Applications folder.
  4. Eject the Viscosity disk image.
  5. Launch Viscosity from your Applications folder.
  6. Enter your Mac OS X username and password so Viscosity can configure itself and install any necessary components.
  7. Download the OpenVPN Configuration files.
  8. Go to the Viscosity menu and select "Preferences." The preferences window should appear.
  9. Make sure the "Connections" toolbar item is selected, and then click the "+" button in the bottom left hand corner of the window.
  10. Select "Import Connection" from the menu that appears.
  11. Select the OpenVPN configuration file (.ovpn or .conf) contained in the download. Click the Open button.
  12. Click the OK button to confirm the connection has been imported. Your connection will now appear in the Viscosity menu.
  13. Go to the Viscosity menu and select your connection.
  14. When you are prompted, enter your username and password.
  15. The menu icon will update to let you know when your new connection has connected.

Ubuntu OpenVPN VPN Installer Ubuntu Linux 12.04: OpenVPN Installer

  1. Download the openvpn ubuntu installer
  2. Run sudo sh ~/Downloads/install_ubuntu.sh (replace path to installer accordingly)
  3. Type 'y' to install python 2.7 in case it's not installed.
  4. Type 'y' to install network-manager-openvpn in case it's not installed.
  5. Enter the login for your account.
  6. Wait for the installation to finish.
  7. Connect using the Network Manager.
  8. Enter your password when prompted (only needs to be done once per region).

Ubuntu OpenVPN VPN Setup Ubuntu Linux 12.04: OpenVPN via Network Manager Setup

  1. Open a Terminal, and run: sudo apt-get install openvpn network-manager-openvpn network-manager-openvpn-gnome. This will prompt for both your password, and a Y/n answer, please provide it with your password, and Y
  2. Once installed, open System Settings, then Network
  3. Press the + symbol to add a new connection, and select the VPN Interface, then press Create
  4. Choose OpenVPN as your VPN Connection Type, and press Create
  5. The following will walk you though all configuration steps needed for the PIA VPN.
    1. Gateway: Select one of the Hostnames provided on the Network page
    2. Authentication
      1. Type: Password
      2. Username: The username provided with the PIA account
      3. Password: The password provided with the PIA account
      4. CA Certificate: Downloaded this zip file and extract the ca.crt file to somewhere it won't be deleted. We suggest your Home folder. If you extract this to your home folder, when searching for it, please click on your username on the left side, which will take you right to the home folder, then select the ca.crt file from the options on the right.
    3. Advanced: Under the general tab, check the Use LZO data compression
    4. IPv4 Settings:
      1. Method: Automatic (VPN) Addresses Only
  6. Press Save. If you chose to have your password saved it may ask for you to verify your password to open your keyring.

Ubuntu OpenVPN VPN Setup Ubuntu Linux 10.10: OpenVPN Setup

  1. In Terminal, install openvpn packages with sudo apt-get install network-manager-openvpn.
  2. Restart the network manager with sudo restart network-manager
  3. Run sudo wget https://www.privateinternetaccess.com/openvpn/openvpn.zip
  4. Extract the files from the zip with unzip openvpn.zip.
  5. Move ca.crt and crl.pem to /etc/openvpn
  6. Open the Network Manager on the menu bar.
  7. Choose add and select the OpenVPN connection type, and click Create.
  8. Enter Private Internet Access SSL for the Connection Name.
  9. Enter us-california.privateinternetaccess.com [*] for the Gateway
  10. Select Password and enter your login credentials.
  11. Browse and select the CA Certificat we saved in Step 3.
  12. Choose Advanced and enable LZO Compression.
  13. Apply and exit.
  14. Connect using the Network Manager.

Robolinux 7.5.3 OpenVPN Setup Robolinux 7.5.3 OpenVPN Setup

  1. Click here to download openvpn.zip
  2. Please note that the file may be found in your Downloads folder. Copy and paste or drag the openvpn.zip file into your Home Folder in Robolinux.

    Right click the zip file and select Extract Here.

  3. Click the Internet Connection icon on the very top right of your Robolinux screen.
  4. Then click on VPN Connections and Configure VPN.

  5. Click the Add button in Network Connections and then the Create button in the Choose a VPN Connection Type dialogue box.
  6. Under Authentication, click on Type and then select the Password option.
  7. Click on CA Certificate, which shows None, and navigate to the openvpn folder which should be in your User Home folder.
  8. It will now automatically select the ca.crt file. Click Open in that dialogue box.

  9. Click here to select your gateway or VPN Hostname.
  10. Choose your gateway, then copy and paste your choice into the Gateway field.

    Please note that you can change your Gateway location anytime you want to.

  11. In the User name: field, enter your supplied username.
  12. In the Password: field, enter your supplied password.
  13. Click on Advanced and check the box called Use LZO data compression. Then click OK and then Save from the Editing VPN Connection screen.
  14. Click the Close button in the Network Connections screen.
  15. Setup is complete!
  16. To load Private Internet Access, click on the Internet connection icon at the top right of your screen and go down to VPN Connections, and then click on your VPN Connection.

Android IPSEC L2TP VPN Setup Android IPSEC/L2TP PSK: VPN Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Open Settings and click on Wireless Controls
  3. Click on VPN Settings
  4. Click on Add VPN
  5. Choose L2TP/IPSec PSK VPN
  6. In the VPN Name field, enter Private Internet Access
  7. In the Set VPN Server field, enter us-california.privateinternetaccess.com [*]
  8. Set IPSec pre-shared key to mysafety
  9. Do not enable L2TP secret.
  10. Click Save
  11. Open Settings and click on Wireless Controls
  12. Click on Private Internet Access
  13. In the Username: field, enter your supplied username
  14. In the Password: field, enter your supplied password
  15. Some users may select Remember username
  16. Click Connect

MacOSX L2TP IPSEC VPN Setup Mac OS X 10.5+: VPN L2TP/IPSec Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Click the Apple Menu in the upper left corner
  3. Click on System Preferences
  4. In the System Preferences window, click Network
  5. In the Network window, click the Lock and enter your password.
  6. Click + to add a new connection.
  7. In the following prompt, for Interface: select VPN
  8. In the VPN Type:, select L2TP over IPSec
  9. In the Service Name: field, enter Private Internet Access
  10. Click Create
  11. In the Server Address: field, enter us-california.privateinternetaccess.com [*]
  12. In the Account Name: field, enter your supplied username
  13. Click Authentication Settings
  14. In the Password: field, enter your supplied password
  15. In the Shared Secret field, enter mysafety
  16. Click Ok
  17. Click the Advanced button
  18. Make sure to select Send all traffic over VPN connection
  19. Click Connect

Boxee PPTP VPN Setup Boxee Box: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. Access Settings and then VPN.
  3. Set the Connection Type to PPTP.
  4. Enter the Server address as us-california.privateinternetaccess.com [*].
  5. Enter your username in the Account field.
  6. Enter your password in the Password field.
  7. Set Encrypt required to Yes.
  8. Next, access the Network settings.
  9. Set the DNS servers to 8.8.8.8 and 8.8.4.4.

DD-WRT PPTP VPN Setup DD-WRT: VPN PPTP Setup

  1. It is required to use the Username and Password generated from our Generating a Password for PPTP/L2TP/SOCKS guide.
  2. In DD-WRT, access the VPN tab found under the Services section.
  3. Enable the PPTP Client.
  4. Set the Server IP or DNS Name to us-california.privateinternetaccess.com [*].
  5. Set the MPPE Encryption to mppe required,no40,no56,stateless.
  6. Enable NAT.
  7. Enter your User name and Password.
  8. If these steps do not work, please setup PPTP in the WAN section instead.

DD-WRT OpenVPN VPN Setup DD-WRT: VPN OpenVPN Setup

  1. Access the Administration area and then go to Commands and finally Startup.
  2. Enter the following:
      echo username >> /tmp/password.txt
      echo password >> /tmp/password.txt
      /usr/bin/killall openvpn
      /usr/sbin/openvpn --config /tmp/openvpncl/openvpn.conf --route-up /tmp/openvpncl/route-up.sh --down-pre /tmp/openvpncl/route-down.sh --daemon
  3. Access the VPN tab found under the Services section.
  4. Enable the OpenVPN Client.
  5. Set the Server IP/name to us-california.privateinternetaccess.com [*].
  6. Set the Port to 1194.
  7. Set the Tunnel Device to TUN.
  8. Set the Tunnel Protocol to UDP.
  9. Set the Encryption Cipher to Blowfish CBC (Default).
  10. Set the Hash Algorithm to SHA1.
  11. Set the nsCertType to unchecked.
  12. Set the Advanced Options to Enabled.
  13. Set Use LZO Compression to Enable.
  14. Set NAT to Enable.
  15. In the Additional Config enter the following:
      auth-user-pass /tmp/password.txt
      persist-key
      persist-tun
      tls-client
      remote-cert-tls server
  16. Copy and paste the contents of ca.crt found in our OpenVPN Config Files, into the CA cert field.

Tomato OpenVPN VPN Setup Tomato: OpenVPN VPN Setup

  1. Newest builds please follow the tutorial here Tomato Forum
  2. Click Administration and then Scripts and enter the following in the init section:
      echo username >> /tmp/password.txt
      echo password >> /tmp/password.txt
    Some users have found that they needed to manually create the password file due to chmod permissions.
  3. Click VPN Tunneling and then Client.
  4. Choose Client 1 and then choose Basic.
  5. Set Start with WAN to Enabled.
  6. Set Interface Type to Tun.
  7. Set Protocol to UDP.
  8. Set the Server Address/Port to us-california.privateinternetaccess.com [*] and port to 1194.
  9. Set the Firewall to Automatic.
  10. Set Authorization Mode to TLS.
  11. Set Extra HMAC authorization to Disabled.
  12. Set Create NAT on tunnel to Enabled.
  13. Click on the Advanced tab.
  14. Set Poll Interval to 0.
  15. Set Redirect Internet Traffic to Disabled.
  16. Set Accept DNS configuration to Enabled.
  17. Set Encryption cipher to (Use Default).
  18. Set Compression to (Adaptive).
  19. In the Custom Configuration, input the following:
      persist-key
      persist-tun
      tls-client
      auth-user-pass /tmp/password.txt
      comp-lzo
      verb 1
      reneg-sec 0
  20. Click on the Keys tab and copy and paste the contents of ca.crt found in our OpenVPN Config Files, into the Certificate Authority.

PfSense OpenVPN VPN Setup PfSense: OpenVPN VPN Setup

  1. Access the VPN tab at the top.
  2. Select the Client tab within the OpenVPN settings.
  3. Make sure Disable this client is not selected.
  4. Set the Server Mode to Peer to Peer (SSL/TLS).
  5. Set the Protocol to UDP.
  6. Set the Device mode to tun.
  7. Set the Interface to WAN.
  8. Leave the Local Port blank.
  9. Set the Server host or address to us-california.privateinternetaccess.com [*].
  10. Set the Server port to 1194.
  11. Leave all Proxy fields blank.
  12. Set the Server host name resolution to Infinitely resolve server.
  13. Set the Description to Private Internet Access.
  14. Set the Peer Certificate Authority to OpenVPN.
  15. Set the Client Certificate to webConfigurator default.
  16. Set the Encryption algorithm to BF-CBC (128-bit).
  17. Set the Hardware Crypto to No Hardware Crypto Acceleration.
  18. Leave all the Tunnel Settings blank.
  19. Add the following settings in the Advanced configuration:
      nobind
      auth-user-pass /etc/openvpn-password.txt
      comp-lzo
      ca /etc/ca.crt
  20. Login to the pfSense router by shell.
  21. Create a file called /etc/openvpn-password.txt with the following:
      username
      password
  22. Copy the ca.crt file into your /etc/ folder. You can find this file in our OpenVPN Config Files

private internet access Installing / Using a CRL (Certificate Revocation List)

  1. Note this is only necessary if you are not using our VPN client.
  2. Download the CRL file "crl.pem" by using this link.
  3. Copy the "crl.pem" file to the same configuration directory as your config files and ca.crt file.
  4. On the config file currently in use or the field for advanced/custom/extra configuration, add "crl-verify crl.pem".
  5. If necessary, use the absolute path instead of the relative path to the file, for example "crl-verify /etc/openvpn/crl.pem"

private internet access Generating a Password for PPTP/L2TP/SOCKS

  1. Log in to the Client Control Panel.
  2. Click the Generate Password button under the Generate PPTP/L2TP/SOCKS Password section.
  3. A Username starting with "x" and a random Password will be shown.
  4. You must use this username and password to login to PPTP, L2TP, or SOCKS.
  5. Please refer to the PPTP/L2TP/SOCKS guides in our Support Section in order to use these credentials.