To add a necessary registry setting: In the Start menu search box, type "regedit" and press ENTER.
You will be prompted to allow Administrator rights, click Yes or Continue.
Locate and click the registry subkey named HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
On the Edit menu, point to New, and click DWORD Value.
In the New Value #1 box, type "AssumeUDPEncapsulationContextOnSendRule" (this is case-sensitive and contains no spaces), and press ENTER.
Right-click AssumeUDPEncapsulationContextOnSendRule, and select Modify.
In the Value data box, type "2" and click OK. Then reboot the computer.
To install the certificate (you will need administrative privileges on your computer): Download the certificate and save it.
To open the Certificates Management Console, type "mmc" in the Start menu search box, and press enter.
You will be prompted to allow Administrator rights, click Yes or Continue.
From the File menu, select Add/Remove Snap-in...
In the Available snap-ins: list, double-click Certificates.
In the popup window, select Computer account, click Next, then click Finished.
Press OK to close the Snap-ins window.
In the center window, double-click Certificates (Local Computer).
Then double-click Personal.
Right-click in the window, then go to All Tasks, then click Import...
Click Next, then Browse..., and locate the .p12 file you downloaded earlier. (You will have to change the file search from x.509 Certificates to Personal Information Exchange)
Click Next, type "goldenfrog" in the Password field and click Next again.
Select Automatically select the certificate store based on the type of certificate and click Next, then click Finish.
You'll now configure the L2TP/IPsec connection: Go to the Windows/Start Menu, then Control Panel.
Click on Network and Internet.
Click on Network and Sharing Center.
Click Setup a new connection or network.
Choose Connect to a workplace then Next.
Click Use my Internet Connection (VPN).
Enter the desired VPN server address in the Internet address field. View the server addresses here.
In the Destination name field, type a descriptive name.
Select ‘Don't connect now’ then click Next.
Type in your Golden Frog Login (e-mail address) and Password in their respective fields, leave Domain blank. Check Remember this password. Click Create.
Click Close.
In Network and Sharing Center, click Manage network connections.
Right-click your new connection and click Properties.
On the Security tab, change the dropdown box from Automatic to L2TP IPsec VPN.
Under the security tab, click Advanced settings and confirm that Use certificate for authentication and Verify the Name and Usage attributes of the server's certificate are selected.
Change the data encryption to "Maximum strength encryption" to enable 256-bit encryption.
To connect...In the Windows Taskbar, click on the Network icon. Then click on your new connection.
Click on the Connect button.
To add a necessary registry setting:
- In the Start menu search box, type "regedit" and press ENTER
- You will be prompted to allow Administrator rights, click Yes.
- Locate and click the registry subkey named HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
- On the Edit menu, point to New, and click DWORD Value
- In the New Value #1 box, type "AssumeUDPEncapsulationContextOnSendRule" (this is case-sensitive and contains no spaces), and press ENTER.
- Right-click AssumeUDPEncapsulationContextOnSendRule, and select Modify.
- In the Value data box, type "2" and click OK
- Reboot the computer
To install the certificate:
Installation of the Golden Frog Certificate requires administrative privileges on your computer.
- Download the certificate and save it.
- Open the Certificates Management Console
- In the Start menu search box, type "mmc" and press enter.
- You will be prompted to allow Administrator rights, click Yes.
- From the File menu, select Add/Remove Snap-in...
- In the Available snap-ins: list, double-click Certificates.
- In the popup window, select Computer account, click Next, then click Finished.
- Press OK to close the Snap-ins window.
- Import the Golden Frog Certificate
- In the center window, double-click Certificates (Local Computer), and then double-click Personal.
- Right-click in the window, then go to All Tasks, then click Import...
- Click Next, then Browse..., and locate the .p12 file you downloaded earlier.
- Click Next, type "goldenfrog" in the Password field and click Next again
- Select Automatically select the certificate store based on the type of certificate and click Next, then click Finish.
To configure the L2TP/IPsec connection:
- Open Network and Sharing Center in the Control Panel
- Go to the Windows Menu, then Control Panel
- Click on Network and Internet
- Click on Network and Sharing Center
- Click Setup a new connection or network
- Choose Connect to a workplace then Next
- Click Use my Internet Connection (VPN)
- Enter the desired VPN server address in the Internet address field. View the server addresses here.
- In the Destination name field, type a descriptive name.
- Check Don't connect now then click Next
- Type in your Golden Frog Login (e-mail address) and Password in their respective fields; leave Domain blank
- Check Remember this password
- Click Create and then Close
- Open VPN Connection Properties
- In Network and Sharing Center, click Change adapter settings
- Right-click your new connection and click Properties
- Configure for L2TP/IPsec
- On the Security tab, change the dropdown box from Automatic to Layer 2 Tunneling Protocol with IPsec (L2TP/IPsec)
- Click Advanced and confirm that both the Use certificate for authentication and Verify the Name and Usage attributes of the server's certificate are selected
- On the security tab, change the Data Encryption to Maximum strength encryption to enable 256-bit encryption.
To Connect:
- In the Windows Taskbar, click on the Network icon
- Click on your new connection, and then click on the Connect button
- Type in your Golden Frog Login (e-mail address) and Password in their respective fields and click Connect
To Disconnect:
- Click the Network icon on the taskbar
- Click the name of your VPN connection, then Disconnect
If you need any further assistance, please contact support.
Last reviewed/updated June 2019