# Create a server certificate

##### [Order now](https://puqcloud.com/puqvpncp.php) | [Download](https://download.puqcloud.com/cp/puqvpncp/) | [FAQ](https://faq.puqcloud.com)

<p class="callout info">Before creating a server certificate, you must create or import a root certificate.</p>

Go to menu item **VPN servers -&gt; IKEv2**

[![image-1670924167899.png](https://doc.puq.info/uploads/images/gallery/2022-12/scaled-1680-/image-1670924167899.png)](https://doc.puq.info/uploads/images/gallery/2022-12/image-1670924167899.png)

You need to fill in the required fields such as:

- **Server Domain**
- **Server IP**
- **Common name**
- **Organization**

Then click the button **Generate SERVER certificate**

After these steps, the **Server certificate and private key** will be generated.  
Information about the certificate will be available in the same place.

[![image-1670924293587.png](https://doc.puq.info/uploads/images/gallery/2022-12/scaled-1680-/image-1670924293587.png)](https://doc.puq.info/uploads/images/gallery/2022-12/image-1670924293587.png)

To remove the server certificate, use the **Delete SERVER certificate** button

After a successful server certificate generation process, the IKEv2 server transitions to the enabled state.

[![image-1670924457963.png](https://doc.puq.info/uploads/images/gallery/2022-12/scaled-1680-/image-1670924457963.png)](https://doc.puq.info/uploads/images/gallery/2022-12/image-1670924457963.png)