NordVPN Help Center
One place for all the information you need

Windows PC setup - IKEv2/IPsec manual setup

Updated

The IKEv2/IPsec connection method is one of the alternative options for connecting to NordVPN servers on your Windows PC. This connection method is preferred by privacy enthusiasts, as IKEv2/IPsec security protocol is currently one of the most advanced in the market. Having said that, this manual set-up lacks the additional features of the native NordVPN app and it is a bit more complicated to set up.

What makes this connection method so unique is that the only file that needs to be downloaded and installed is the NordVPN digital certificate. Windows provides the connection application itself - it's built right into Windows.

Windows 10

Certificate installation:

  • 1. Download the NordVPN IKEv2 certificate here:
    https://downloads.nordvpn.com/certificates/root.der .

    Then, open the root.der file. (Double-click on it)

     

  • 2. Click “Open”.

     

  • 3. Click “Install Certificate…

     

  • 4. Select “Local Machine”, and click Next.

     

  • 5. Select “Place all certificates in the following store”, and click “Browse..”.

     

  • 6. Select “Trusted Root Certification Authorities”, and click OK, then “Next”.

     

  • 7. Click “Finish”.

     

  • 8. Click “OK” on both windows.

     

Set up a VPN connection:

  • 9. Right click on the Windows icon and click Control Panel.

     

  • 10. Open Network and Internet

     

  • 11. Click on Network and Sharing Center.

     

  • 12. Click Set up a new connection or network.

     

  • 13. Click Connect to a workplace and click Next.

     

  • 14. If you are asked "Do you want to use a connection that you already have?", select "No, create a new connection" and then click Next.

  • 15. Click Use my Internet connection (VPN).

     

  • 16. Enter de74.nordvpn.com (Or any of our servers you wish to use) into Internet Address and Germany#74 server (Or any other name you wish) into Destination name and click Create.

     

  • 17. Open Network and sharing center again and click Change adapter settings.

     

  • 18. Open the properties dialog of Germany#74 adapter and show Security tab.

     

  • 19. Enter the following:

    Type of VPN: IKEv2
    Data encryption: Require encryption (disconnect if server declines)
    Authentication: Use Extensible Authentication Protocol(EAP) and EAP-MSCHAPv2

    Then click OK.

     

  • 20. Click OK.

Connection:

  • 21. Move the cursor to the right corner of your screen and click the Network icon and click on Germany#74 server.

     

  • 22. Select Germany#74 sever and click Connect.

     

  • 23. In the Sign in dialog, enter your NordVPN credentials.

     

Once that is done, you should be connected!

Close ↑

Windows 8

Certificate installation:

  • 1. Download the NordVPN IKEv2 certificate here:
    https://downloads.nordvpn.com/certificates/root.der .

    Then, open the root.der file. (Double-click on it)

     

  • 2. Click “Open”.

     

  • 3. Click “Install Certificate…

     

  • 4. Select “Local Machine”, and click Next.

     

  • 5. Select “Place all certificates in the following store”, and click “Browse..”.

     

  • 6. Select “Trusted Root Certification Authorities”, and click OK, then “Next”.

     

  • 7. Click “Finish”.

     

  • 8. Click “OK” on both windows.

     

Set up a VPN connection:

  • 9. Go into the Control Panel.

    9.png 

  • 10. Open Network and Internet

     

  • 11. Click on Network and Sharing Center.

     

  • 12. Click Set up a new connection or network.

     

  • 13. Click Connect to a workplace and click Next.

     

  • 14. If you are asked "Do you want to use a connection that you already have?", select "No, create a new connection" and then click Next.

  • 15. Click Use my Internet connection (VPN).

     

  • 16. Enter de74.nordvpn.com (Or any of our servers you wish to use) into Internet Address and Germany#74 server (Or any other name you wish) into Destination name and click Create.

     

  • 17. Open Network and sharing center again and click Change adapter settings.

     

  • 18. Open the properties dialog of Germany#74 adapter and show Security tab.

     

  • 19. Enter the following:

    Type of VPN: IKEv2
    Data encryption: Require encryption (disconnect if server declines)
    Authentication: Use Extensible Authentication Protocol(EAP) and EAP-MSCHAPv2

    Then click OK.

     

  • 20. Click OK.

Connection:

  • 21. Move the cursor to the right corner of your screen and click the Network icon.

    21_edit.png 

  • 22. Select Germany#74 sever and click Connect.

    21.png 

  • 23. In the Sign in dialog, enter your NordVPN credentials.

    21.1.png 

Once that is done, you should be connected!

Close ↑

Windows 7

Installing the NordVPN certificate

The NordVPN root certificate needs to be installed to be able to connect using the IKEv2 protocol. It only needs to be installed once, and it will not affect your system in any other way.

  • 1. Download our NordVPN certificate:
    https://downloads.nordvpn.com/certificates/root.der
    Note: Your browser may try to save the file into its own certificate location, or open it immediately. Make sure to download the file, instead of opening it. On Firefox, right-click the link above and select "Save Link As...". In Internet Explorer, select "Save" instead of "Open". Chrome will download the file correctly.

  • 2. Press the keyboard combination Windows icon + R to open the Run window.

    Type in mmc and click OK.

     

  • 3. In the new window click on File and Add/Remove Snap-in….

     

  • 4. Click on Certificates and click on the “Add >” button.

     

  • 5. Then choose Computer account and click Next.

     

  • 6. Choose Local computer: (the computer this console is running on) and click “Finish”.

     

  • 7. Click OK

     

  • 8. Click on Certificates (Local Computer), right click on Trusted Root Certification Authorities and click All Tasks > Import.

     

  • 9. Click Next.

     

  • 10. Click Browse button.

     

  • 11. Locate the root.der file which you have downloaded in first step. Click on and press Open. If the file is not visible, make sure to select "All Files (*.*)" at the bottom of the window.

     

  • 12. Click Next.

     

  • 13. Select Place all certificates in the following store and click Next.

     

  • 14. Click Finish. Afterwards you will receive a notification saying “The import was successful”.

     

     

Configure the connection.

This part of the tutorial actually configures the connection.

  • 15. Go to the Control panel, and click on Network and Internet.

     

  • 16. Click on Network and Sharing Center.

     

  • 17. Click Set up new connection or network.

     

  • 18. In new tab select Connect to a workplace and click next.

     

  • 19. Select No, create a new connection and click next. This window will only appear if you have configured a manual connection before.

     

  • 20. Click on Use my Internet connection (VPN).

     

  • 21. Fill in the following information:

    Internet address: a hostname of any of our servers. For example, us333.nordvpn.com - you can find hostnames for all of our servers here: https://nordvpn.com/servers/

    Destination name: Any name, this is not relevant.

    Make sure that Don’t connect now;.. is checked and click Next.

     

  • 22. Fill in your NordVPN account credentials and click Create.

     

  • 23. Click close and go back to Internet and Sharing Center.

     

  • 24. Click on Change adapter settings in the left sidebar.

     

  • 25. Right click on the adapter you have created and click on Properties.

     

  • 26. In the Security tab, change the following lines:

    Type of VPN - IKEv2.
    Data encryption: Require encryption.
    Authentication: Use Extensible Authentication Protocol(EAP)
    Microsoft: Secured password (EAP-MSCHAP v2).

     

  • 27. In the Networking tab, uncheck Internet Protocol Version 6 (TCP/IPv6), then select Internet Protocol Version 4 (TCP/IPv4) , and click on Properties.

     

  • 28. Select Use the following DNS server addresses, and write in these DNS addresses:
    162.242.211.137 and 78.46.223.24

     

  • 29. Click OK on all tabs, go back to the network adapter list, and right click on the adapter that you have created and click on Create Shortcut to have a shortcut on desktop.

     

  • 30. Double click n the shortcut and click connect.
    (your NordVPN credentials will be saved from the previous, 22nd step)

     

Once that is done, you should be connected!

Close ↑

Other connection methods can be found here:
https://support.nordvpn.com/hc/en-us/articles/115001195229