

To start off, update your OpenVPN Server’s package index and install OpenVPN and Easy-RSA. Easy-RSA is a public key infrastructure (PKI) management tool that you will use on the OpenVPN Server to generate a certificate request that you will then verify and sign on the CA Server. The first step in this tutorial is to install OpenVPN and Easy-RSA. See How to Set Up SSH Keys on Ubuntu 20.04 for instructions on how to perform either of these solutions.

Alternatively, you could generate an SSH keypair for each server, then add the OpenVPN Server’s public SSH key to the CA machine’s authorized_keys file and vice versa. To resolve this issue, you could re-enable password authentication on each server. Note: Please note that if you disable password authentication while configuring these servers, you may run into difficulties when transferring files between them later on in this guide.
