Connect Using IKEv2 on Windows (Native)

Windows 10 and 11 have a built-in IKEv2 VPN client, so you can connect to PremierVPN without installing anything. This guide shows you how to add the connection, connect, and fix the most common errors.

Want more features? The PremierVPN app for Windows adds WireGuard, OpenVPN, a kill switch and Bypass mode for networks that block VPNs. It signs in with your portal email and password.

Before you start: use your VPN credentials

Manual setups sign in with your VPN username and VPN password. These are separate from the email and password you use for the portal and the PremierVPN apps, and the portal login will not work here.

• Find both on your Dashboard under Your VPN credentials. Click Show to reveal the password.
• To change the VPN password, go to Settings › VPN Password. The new password applies from your next connection.
• Not sure which login is which? See Understanding your VPN credentials.

Add the VPN connection

1. Open Settings (press Win + I).
2. Go to Network & internet › VPN.
3. Click Add VPN (on Windows 10: Add a VPN connection).
4. Fill in:
   • VPN provider: Windows (built-in)
   • Connection name: any name, for example PremierVPN UK
   • Server name or address: a hostname from the table below, for example uk.premiervpn.net
   • VPN type: IKEv2
   • Type of sign-in info: User name and password
   • User name: your VPN username
   • Password: your VPN password
5. Tick Remember my sign-in info if you don't want to type it each time, then click Save.

Connect and disconnect

1. Go to Settings › Network & internet › VPN, or click the network icon in the taskbar and choose VPN.
2. Click Connect next to your PremierVPN connection.
3. The status changes to Connected.

To disconnect, click Disconnect in the same place.

Check the security settings if it won't connect

Windows normally picks the right settings for a username and password IKEv2 connection. If you get an authentication error, check them:

1. Press Win + R, type ncpa.cpl and press Enter.
2. Right-click your PremierVPN connection and choose Properties.
3. Open the Security tab and set:
   • Type of VPN: IKEv2
   • Data encryption: Require encryption (disconnect if server declines)
   • Authentication: Use Extensible Authentication Protocol (EAP), with Microsoft: Secured password (EAP-MSCHAP v2)
4. Click OK and connect again.

Server hostnames

To switch location, edit the connection's server address or add another connection. You can also copy any hostname from the Servers page in the portal.

Troubleshooting

Error 809, or "the remote server is not responding"

IKEv2 uses UDP ports 500 and 4500. Some public Wi-Fi, office and school networks block them. Check the server address is spelled correctly, then try another network. If IKEv2 is blocked, try OpenConnect (port 443) or the PremierVPN app.

Error 13801 or "IKE authentication credentials are unacceptable"

Windows couldn't verify the server's certificate. Our servers use a publicly trusted certificate, so install any pending Windows updates (they include root certificate updates) and check the hostname exactly matches the table.

Authentication failed (error 691 or similar)

Use your VPN username and VPN password from the Dashboard, not your portal email and password. If you changed the VPN password recently, update it in the connection's Advanced options.

Does IKEv2 reconnect when I change networks?

IKEv2 supports MOBIKE, which helps the connection survive moving between Wi-Fi and mobile data. If it does drop, reconnect from the VPN menu.

Still stuck? Open a support ticket and tell us your Windows version, the error number and what you've tried.