< Back

How to set up IKEv2 manual connection on macOS?

This guide will cover the necessary steps of configuring the IKEv2 manual connection with Surfshark on your macOS device. IKEv2 can help you connect to Surfshark servers in restricted network countries or on older macOS versions.


Here are the steps that we will go through:

You will need a macOS device and an active Surfshark subscription to follow along.



Get your credentials


  1. Please visit surfshark.com and log in to your account.  You can find the direct link here.

    In case this link doesn't work, please try this page instead.

  2. Go to the VPN -> Manual setup -> Manual -> Credentials section and copy the Username and the Password.



Select your location


  1. Go to the VPN -> Manual setup -> Manual -> Files section.

  2. Select which location do you wish to connect to and copy the domain address under the locations name like in the screenshot.



Install the certificate


  1. Go to the VPN -> Manual setup -> Manual -> Files section.

  2. Scroll down until you see the IKEv2 certificate under Other configuration files. Click on IKEv2 certificate to download a certificate file.


  3. Once you download the certificate file, you can open it right away. Click on the arrow pointing up.


  4. Clicking on it will bring up a small menu. Click Open.


  5. You will receive a keychain inquiry asking for your permission to add the IKEv2 Surfshark certificate into your keychain. Click Add.


  6. Open your Keychain application afterward and locate the Surfshark Root CA certificate on the list. Right-click on it and select Get Info.


  7. Press the triangle next to the Trust directory and select Always Trust next to When using this certificate. If you are required to enter your Mac password, please do so. Then close the Keychain.



Set up the connection


  1. To begin the setup process, you need to access the System Preferences and select Network.


    To access the System Preferences, type "System" in the Finder and press Enter.


  2. In the Network window click the "+" icon and enter the required settings.


    Interface: VPN
    VPN Type: IKEv2
    Service Name: You can select any name you prefer.

    Click Create afterward.

  3. New fields for the configuration will appear which you will also need to fill.


    Server Address and Remote ID: input the domain address from the "Select your location" step. Both of these fields are identical so put the same domain address there.

  4. After that, click on the Authentication Settings... button, select Username as the authentication method then enter your Surfshark service credentials from the "Get your credentials" step. Click OK and then Apply the settings.


  5. Now you can click Connect to establish a connection to one of Surfshark's servers. You can see in the screenshot below that it is connected. Also, make sure to leave a checkmark on the "Show VPN status in menu bar" box.


  6. Since you checked the "Show VPN status in menu bar" box, you can now easily control your connectivity with few clicks straight from the menu bar.


To make sure that you have connected successfully, please take a look at this article.



Congratulations! You have successfully set up IKEv2 manual connection to Surfshark servers! As long as you’re connected, your location is private, and your sensitive data is secure.


If you have any further questions, our customer success team will help you 24/7 over a live chat or email.


You may also be interested in:

Was this article helpful?