Configuring a Mobileconfig VPN profile to install certificates

To configure a Mobileconfig VPN profile to install certificates:

1. In Apple Configurator 2, go to File > New Profile.
2. Go to Certificates and configure a certificate for VPN client authentication.

   

3. Go to VPN, and configure the following fields:
   1. For Connection Type, select Custom SSL.
   2. In the Identifier field, enter com.fortinet.forticlient.fabricagent.
   3. In the Server field, enter the VPN server address as an IP address or fully qualified domain name.
   4. In the Provider Bundle Identifier field, enter com.fortinet.forticlient.fabricagent.packettunnel.
   5. For User Authentication, select Certificate.

      

4. Install the Mobileconfig file on the device. This adds a VPN account to the device settings, which the end user cannot view in their FortiClient (iOS) application.
5. The end user can access the VPN profile from the iOS settings menu. Go to General Settings > VPN & Device management > VPN. Select the VPN profile, and connect. When the end user enables the VPN tunnel in settings, iOS launches an SSL VPN tunnel using FortiClient (iOS).