Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The Azure VPN Client for Linux (preview), which is the Microsoft-provided VPN client application used to establish Point-to-Site (P2S) connections from Linux machines to Azure VPN gateways (for both Virtual WAN and VPN Gateway), is being retired on August 31, 2026.
The client remained in public preview since its release and doesn't have a path to general availability (GA). As part of Microsoft's ongoing effort to align Azure networking services with current security and reliability standards, we have made the decision to retire this preview client rather than continue to maintain an unsupported preview indefinitely.
This retirement doesn't affect the Azure Virtual WAN VPN gateway itself, Azure VPN Client for Windows, Azure VPN Client for macOS, or any Site-to-Site VPN functionality. Only the Linux preview client application (microsoft-azurevpnclient package) is being retired.
- See the FAQ and additional resources section of this article for more details on the rationale, timing, alternatives, and impact of this retirement.
- For VPN Gateway, see the VPN Gateway article.
What steps do I need to take?
Before August 31, 2026, transition your Linux VPN users to one of the following supported alternatives for Azure Virtual WAN P2S connections.
Note that some of the links in this section point to Azure VPN Gateway documentation. The migration steps and supported alternatives are the same for both Virtual WAN and VPN Gateway, so the linked configuration articles apply to both services.
| Client | Tunnel Type | Authentication Type | Gateway Configuration | Client Configuration |
|---|---|---|---|---|
| OpenVPN client | OpenVPN | Certificate | Configure your Azure VPN gateway to Support Certificate authentication | Configure OpenVPN client for P2S certificate authentication connections - Linux |
| strongSwan | IKEv2 | Certificate | Configure your Azure VPN gateway to Support Certificate authentication | Configure strongSwan for P2S IKEv2 — Linux |
| RADIUS Authentication | Configure your Azure VPN gateway to Support RADIUS authentication | Configure strongSwan for P2S IKEv2 — Linux |
High-level migration steps
The process for updating your gateway and Linux client are as follows:
- Update your P2S gateway configuration to support the tunnel type required by your chosen alternative (IKEv2 for strongSwan, OpenVPN for the OpenVPN client).
- Generate new VPN client profile configuration files from the gateway.
- Install and configure the replacement VPN client on each Linux device.
- Test connectivity and roll out to your user base.
- Uninstall the Azure VPN Client for Linux.
FAQ and additional resources
When is the Azure VPN Client for Linux being retired?
The retirement date is August 31, 2026. Microsoft will no longer support the client for VPN gateway P2S connections after this date.
Why is the Azure VPN Client for Linux being retired?
The Azure VPN Client for Linux remained in public preview without a path to general availability. To align with Microsoft's security and reliability standards, the preview client is being retired.
What happens if I keep using the Azure VPN Client for Linux after August 31, 2026?
After the retirement date, the client will no longer be supported. While existing installations may continue to function for some period, Microsoft will provide no bug fixes, security patches, or support. The package is also being removed from the Microsoft Linux repository. You shouldn't rely on it for production connectivity.
Does this retirement affect the Azure VPN Client on Windows or macOS?
No. The Azure VPN Client for Windows and macOS are generally available and aren't affected by this retirement.
Does this retirement affect my VPN gateway or site-to-site VPN?
No. Only the Linux preview client application is being retired. Your VPN gateway, P2S gateway configuration, and any S2S connections are unaffected.
Does Microsoft Entra ID (AAD) authentication work with the alternative Linux clients?
No. The OpenVPN and strongSwan open-source clients don't support Microsoft Entra ID (AAD) with the Azure VPN P2S gateway. Microsoft Entra ID authentication on Linux was only available through the Azure VPN Client for Linux.
If you require Microsoft Entra ID authentication for Linux users, you'll need to evaluate alternative approaches such as certificate-based authentication or connecting via a Windows/macOS client that supports Microsoft Entra ID.
Do I need to change my VPN gateway configuration?
It depends on your current tunnel type setting and authentication method. If your gateway is configured for OpenVPN only with certificates, you can switch to the open-source OpenVPN client with no gateway changes.
If you want to use strongSwan, you need to ensure IKEv2 is enabled on the gateway. You can enable multiple tunnel types (for example, IKEv2 and OpenVPN) on the same gateway simultaneously.
You'll also need to enable certificate or RADIUS authentication if your gateway currently supports Microsoft Entra ID (AAD) authentication only.
Will the Microsoft Azure VPN Client for Linux package continue to be available for download?
The package is in the process of being removed from Microsoft's Linux software repository. Customers should plan to uninstall it and transition to an alternative before August 31, 2026.
What are my alternatives for connecting from Linux?
Two fully supported options exist:
- OpenVPN client - uses the OpenVPN tunnel type with certificate authentication. Works broadly across Linux distributions.
- strongSwan - uses the IKEv2 tunnel type with certificate authentication or RADIUS authentication. Works on a wide range of Linux distributions.
Both support more Linux distributions than the preview client did (which was limited to Ubuntu 20.04 and 22.04).
Where can I get help with migration?
See the Azure Virtual WAN documentation for configuration guidance, or contact Azure Support for migration assistance.