Any chance IKEv2 will be supported

[sdaguet]

Hello,

My customer is requiring VPN connection with Yubikey, and need to update username each time I connect.
Would love to be able to update or delete/recreate IKEv2/username&password macos VPN profile via script :)

Thanks

[halo]

Hi!

I would need to buy an Apple Developer ID to create (multiple) IKEv2 services programmatically (this has to do with the entitlements your app needs to have, it doesn't work with "unofficial" apps).

Somehow, at least right now, I'm not willing to do that (I find it sad, that I have to pay to use that particular API of the operating system). I think the API is limited because of security issues (one could route all your traffic through a service). But I'm not sure.

So, I'm afraid you'll have to use mobileconfig files for now. Maybe you'll find a way to generate those files programmatically.

PS: I actually have the same problem as you. I'm trying to create IKEv2 programmatically, but I see no good way of doing it. When macosvpn was created, the NetworkExtension framework didn't exist yet. That new framework is for IKEv2 and, in effect, costs money.

I'll close this conversation for now, but feel free to post anything more that comes to mind.

[sdaguet]

Hello Halo!

Thank you for the quick and detailed answer.

If I understand well, mobileconfig doesn't allow me to define or update the username (which changes quite often with Yubikey).

Anycase, if you are interested, I can sponsor an apple ID account :)