All Topics » Pulse Connect Secure

Automating NC VPN connection with ncsvc - client certificate authentication

Contributor (11)
Jul 19, 2013 2:30am


I'm using Network Connect VPN client on Linux . (v 7.1-0-Build18671)

Is there a way to use client certificate authentication to connect to VPN server, when using the ncsvc command line client ?

The help summary for ncsvc does not list such a possibility .


Contributor (11)
Nov 19, 2007 8:50pm

no, this is not possible. ncsvc only allows automation with username & password authentication.

Contributor (11)
Jul 19, 2013 7:44am

Please advise me where to look for help on this topic.


Contributor (11)
Jul 19, 2013 9:20am

It is possible that I don't understand the VPN login process correctly, so I will describe steps for creating the VPN connection using web browser (GUI login):

1.After entering VPN login page address in address bar, I am presented with a list of client certificates, from which I can choose the appropriate one

2.I am forwarded to a login page which requests username/password to be entered.

3.A Java applet is started which presents me with a connection statistics data window

Can anyone explain how these steps match to the login process invoked by the command line client ?

This is the command I am using when trying to connect:

ncsvc -r realm -u user -p password -u loginurl -f servercert.der -L 5

After running this I can see in the logs that I am being redirected to an url that has a queryparameter like this ?q=no-cert . So, how do I supply the client certificate here ? 

I spend lots of time during my day logging on and off to VPN. It would be of tremendeous value for me if I could automate this process.


If this is not possible using Linux, can this be achieved using Windows's nclauncher ?


Thanks a lot!

    Contributor (0)
    Aug 23, 2017 8:08am
    Hi Ivan,

    Did you eventually figure this out? I'm interested in the same thing: to automate a VPN connection from linux using a client certificate.

Pulse Secure Contributor (40)
Aug 24, 2017 8:01pm
The CLI launch command does not have the ability to do certificate authentication
If this is something you are looking for, please reach out to your account team for assistance with an enhancement request to be sent to the product team for review