In this guide, we will cover how to set up an IKEv2 manual connection on older macOS versions. If you are using the latest macOS Ventura version, follow our guide on IKEv2 setup on macOS Ventura.
Even though the IKEv2/IPSec protocol is no longer supported on macOS on NordVPN 8.5.0 and newer app versions, this connection method can be used as one of the alternative ways to connect to NordVPN servers if you're unable to install the application.
This setup lacks the additional features of the native NordVPN app and is a bit more complicated to set up.
Manual connection setup
- First, download the NordVPN IKEv2 certificate to your macOS. The easiest way is to click this link on your macOS device.
Once downloaded, open the certificate file in the Downloads folder.
- The Add Certificates window will appear. Click Add to add the certificate to the login keychain.
-
Right-click the NordVPN Root CA certificate in the login keychain and select Get Info.
- Under When using this certificate, set the IP Security (IPSec) and Extensible Authentication (EAP) fields to Always Trust. Leave all other fields as Never Trust. You will have to enter your Mac password to make these changes. Once done, close the keychain.
- Click on the Apple logo in the upper-right corner of the screen and select System Preferences....
- In the System Preferences, click on Network.
- When the network window opens, click on the + icon in the lower-left corner (you must have administrator privileges).
- A new window will pop up. Fill in the information as so:
Interface: select VPN from the drop-down menu.
VPN Type: select IKEv2.
Service Name: type any name you want. We recommend that you name the service NordVPN (IKEv2).
- After you have filled in the required fields, click Create:
- The settings for the new VPN connection will now be displayed. In the Server Address and Remote ID fields, type the hostname of a NordVPN server.
For this tutorial, we used the hostname of server NL#37, but you should connect to a server suggested at https://nordvpn.com/servers/tools/. The hostname is right under the server title.
- Click on Authentication Settings…. Select Username as the Authentication method, then type in your NordVPN service username and password. Click OK and then Apply.
You can find your NordVPN service credentials (service username and service password) in the Nord Account dashboard:
- Click Set up NordVPN manually.
- You will receive a verification code in your email that you use for NordVPN services. Type the code in:
- Copy the credentials using the “Copy” buttons on the right:
- After you've set up authentication information, check the Show VPN status in menu bar box (optional), click Connect and then Apply.
You should now be connected.
If you have checked the Show VPN status in menu bar box, you’ll be able to connect to your VPN from the status bar: