Dialing VPN connection vnet-vnetexample, Status = A specified profile cannot be found

Question

Dialing VPN connection vnet-vnetexample, Status = A specified profile cannot be found

marc.caron 10

After following the VPN setup instructions for P2S with EntraID and Microsoft public audience of (Edit: Removed). I can Authenticate but then the connection is dropped with error "A specified profile cannot be found"

This is using

VpnGw2AZ, Public IP (3 zone), GatewaySubnet in a vnet vnetexample,

Point-to-site configuration
Type: OpenVPN (SSL)
Authentication type: Azure Active Directory
Azure AD/Entra Direcotry
Tenant: https://login.microsoftonline.com/{azureAdTenantId}/
Audience: (Edit: Removed)
Issuer: https://sts.windows.net/{azureAdTenantId}/
Generation: I've tried 1 & 2

I've used az cli as well as the azure portal to set this up and download VPN client configuration. I'm using the Azure VPN Client from the windows store on windows 11.

I have authorized microsofts appid.
https://login.microsoftonline.com/common/oauth2/authorize?client_id=(Edit: Removed)&response_type=code&redirect_uri=https://portal.azure.com&nonce=1234&prompt=admin_consent

And no matter how I set it up. I always end up with an error after authentication.

10‎/‎21‎/‎2025‎ ‎7‎:‎30‎:‎09‎ ‎PM: Dialing VPN connection vnet-vnetexample, Status = A specified profile cannot be found
‎10‎/‎21‎/‎2025‎ ‎7‎:‎30‎:‎09‎ ‎PM: Success Received Microsoft Entra Credential Token. User: ******@tenant.com
‎10‎/‎21‎/‎2025‎ ‎7‎:‎29‎:‎43‎ ‎PM: Requested AccountsManager dialog.
‎10‎/‎21‎/‎2025‎ ‎7‎:‎29‎:‎43‎ ‎PM: Dialing VPN connection vnet-vnetexample
‎10‎/‎21‎/‎2025‎ ‎7‎:‎29‎:‎42‎ ‎PM: Saving VPN connection vnet-vnetexample, Status = Success (0)
‎10‎/‎21‎/‎2025‎ ‎7‎:‎29‎:‎42‎ ‎PM: Refreshing VPN connections
‎10‎/‎21‎/‎2025‎ ‎7‎:‎29‎:‎40‎ ‎PM: Picked File C:\Users\user\Downloads\AzureVPN\azurevpnconfig.xml

No, I've not configured anything for the user to access yet. But I should receive an IP and be able to have a stable connection even if there are no resources in the VNET to access.

I've setup VPNs with other things before. But this one appears to just not function from my view. What are the special undocumented settings to make it function?

Thanmayi Godithi 1,635 Reputation points Microsoft External Staff Moderator

2025-10-22T11:19:25.42+00:00

Hello @marc.caron,

Thank you for reaching out on Microsoft Q&A forum.

Could you please share the below details over "Private message" option.

Email ID:

Time zone:

Subscription ID:

Tenand ID:

Thanks,

Thanmayi
marc.caron 10 Reputation points

2025-10-22T23:59:21.4866667+00:00

Hello Thanmayi
I'm looking all over. There is no private message option.

I've reviewed the docs because I assumed it's me? But there is no blue banner and there is no private message button. Or anything else private.

Also I have validated that "Private message notifications" is on in my settings since that may also be a factor apparently? Searching the page elements I see in scripts msDocs.data.isPrivateUnauthorrized: false but that's all I can find in the html elements even.

thanks marc
Thanmayi Godithi 1,635 Reputation points Microsoft External Staff Moderator

2025-10-23T01:19:38.4933333+00:00

Hi @marc.caron,

You can find the "Private message" option right under your question.

Please refer the below image.

Please let me know if you are able to see that option, right under your question.
Thanmayi Godithi 1,635 Reputation points Microsoft External Staff Moderator

2025-10-23T02:01:44.4766667+00:00
Hi @marc.caron ,

I see that in your set up you are using Microsoft public audience of (Edit: Removed)

But you have authorized your App id (Client ID) with (Edit: Removed) which is for manually registered Azure VPN.

This mismatch can cause the "A specified profile cannot be found" error because the client and gateway configuration are not aligned with the same App ID and permissions model.

Please update your VPN Gateway configuration to set this App ID as the Audience. Make sure that the Audience value in the VPN Gateway is the same as the App ID of your custom app.

Use the Microsoft-registered App ID (Edit: Removed) exclusively with no manual authorization step. Remove any manual consent or authorization for the old App ID, update the gateway with this Audience, regenerate the client profile, and then try connecting with this new profile.

Or switch the Point-to-Site configuration to use the manually registered custom App ID (Edit: Removed) that you authorized and generate the client accordingly.

Mixing these values will cause failures because of token audience mismatches and profile load issues on the client side. Once you have updated, please download the VPN client profile again and re-import it into the Azure VPN Client.

Could you please follow the above steps and match Audience value with App ID and the let me know if that worked.

Happy to assist you further.

1 answer

Your answer

Thanmayi Godithi 1,635 Reputation points Microsoft External Staff Moderator

2025-10-22T11:19:25.42+00:00

Hello @marc.caron,

Thank you for reaching out on Microsoft Q&A forum.

Could you please share the below details over "Private message" option.

Email ID:

Time zone:

Subscription ID:

Tenand ID:

Thanks,

Thanmayi
marc.caron 10 Reputation points

2025-10-22T23:59:21.4866667+00:00

Hello Thanmayi
I'm looking all over. There is no private message option.

I've reviewed the docs because I assumed it's me? But there is no blue banner and there is no private message button. Or anything else private.

Also I have validated that "Private message notifications" is on in my settings since that may also be a factor apparently? Searching the page elements I see in scripts msDocs.data.isPrivateUnauthorrized: false but that's all I can find in the html elements even.

thanks marc
Thanmayi Godithi 1,635 Reputation points Microsoft External Staff Moderator

2025-10-23T01:19:38.4933333+00:00

Hi @marc.caron,

You can find the "Private message" option right under your question.

Please refer the below image.

Please let me know if you are able to see that option, right under your question.
Thanmayi Godithi 1,635 Reputation points Microsoft External Staff Moderator

2025-10-23T02:01:44.4766667+00:00

Hi @marc.caron ,

I see that in your set up you are using Microsoft public audience of (Edit: Removed)

But you have authorized your App id (Client ID) with (Edit: Removed) which is for manually registered Azure VPN.

This mismatch can cause the "A specified profile cannot be found" error because the client and gateway configuration are not aligned with the same App ID and permissions model.

Please update your VPN Gateway configuration to set this App ID as the Audience. Make sure that the Audience value in the VPN Gateway is the same as the App ID of your custom app.

Use the Microsoft-registered App ID (Edit: Removed) exclusively with no manual authorization step. Remove any manual consent or authorization for the old App ID, update the gateway with this Audience, regenerate the client profile, and then try connecting with this new profile.

Or switch the Point-to-Site configuration to use the manually registered custom App ID (Edit: Removed) that you authorized and generate the client accordingly.

Mixing these values will cause failures because of token audience mismatches and profile load issues on the client side. Once you have updated, please download the VPN client profile again and re-import it into the Azure VPN Client.

Could you please follow the above steps and match Audience value with App ID and the let me know if that worked.

Happy to assist you further.

Answer 1

Jerald Felix 7,520

Hello marc.caron,

I can see you're running into the "A specified profile cannot be found" error after authenticating to your Azure VPN. This is actually a pretty common issue with P2S VPN connections using Entra ID authentication.

The error happens because the Azure VPN Client is successfully authenticating you with Entra ID, but then it can't find the VPN profile configuration that matches your connection. Here's what's likely going on:

The profile name mismatch issue:

Your VPN profile is saved as "vnet-vnetexample" but the client might be looking for a different profile name or the profile got corrupted during setup. When you download the VPN client config from Azure, it creates a specific profile structure that needs to match exactly.

Here's how to fix it:

Delete the existing VPN connection - Remove "vnet-vnetexample" from your Azure VPN Client completely
Re-download the VPN client configuration from Azure Portal:
- Go to your VPN Gateway
- Download the VPN client package again
- Make sure you select the right authentication type (Azure Active Directory)
Import fresh - When you import the new config file (azurevpnconfig.xml), let it create the profile name automatically. Don't rename it.
Check the profile location - The Azure VPN Client stores profiles in C:\Users\{username}\AppData\Local\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\LocalState Make sure the XML file exists there and isn't corrupted

Quick test:

Try running the Azure VPN Client as administrator. Sometimes profile access issues are just permission problems.

If that doesn't work:

The issue might be that your VPN gateway configuration changed after you initially set things up. If you've made any changes to the P2S configuration (like changing the address pool or authentication settings), you need to re-download the client config.

Also, make sure you're using the latest version of the Azure VPN Client from the Microsoft Store - older versions sometimes have profile loading bugs.

Let me know if the re-import fixes it or if you're still seeing the error!

Best Regards,

Jerald Felix

marc.caron 10

Hello Jerald
So I've actually tried many times now. That includes Deleting and re-downloading the VPN client. Inspecting it and verifying it's values. I change nothing in the imported settings. But I do verify them.

I've ensured that deleting the client removes it from localstate drive as well. And the newly imported has no corruption. It's a clean text file essentially. rasphone.pbk

Delete the existing VPN connection - Check
Re-download the VPN client configuration - Check
Import fresh - Check
Check the profile location - Check

Same error

Below are the import vpn client logs (cleared before importing) This is a test vpn, I set it up just for this to prove it out before implementing on my client. So it's clean and nothing else. If this is a common problem, I'd suggest microsoft correct it. It's wasted hours of my time.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎37‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] RemovePipeFallBackConnectionInfo: Removing pipe fallback connection info for profile: vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎37‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Deleting VPN connection vnet-vnetexample-dev-example-vnet-4fpohd, Status = Success (0)

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎37‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Refreshing VPN connections

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎37‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RefreshProfiles: Count: 0, Sorted Count: 0

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎37‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RefreshProfiles:UpdateBadgeGlyph, Connected Count: 0

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎41‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Picked File C:\Users\REDACTED\Downloads\azurevpnconfig.xml

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎41‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] DetailsPage::OnNavigatedTo called for 

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎41‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] CertSelector::ClientCertSelector Enumerating Client Certs for vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎41‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Server Cert Hash selected from CertSelector: df3c24f9bfd666761b268073fe06d1cc8d4f82a4

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎41‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] DetailsPage::OnNavigatedTo complete for vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Refreshing VPN connections

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RefreshProfiles: Count: 1, Sorted Count: 1

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RefreshProfiles: Adding Profile vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Connection state is Disconnected for connection: vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RefreshProfiles: Profile vnet-vnetexample-dev-example-vnet-4fpohd State synced with platform.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RefreshProfiles:UpdateBadgeGlyph, Connected Count: 0

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Tenant id is  for tenant url: 

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎44‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Saving VPN connection vnet-vnetexample-dev-example-vnet-4fpohd, Status = Success (0)

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Connect in progress. App suspension will be blocked if app is minimized.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] RemovePipeFallBackConnectionInfo: Removing pipe fallback connection info for profile: vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Dialing VPN connection vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] GetPrereqTestsFlagFromSettings result is: 1

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] ShouldRunPrereqTest result is: 0

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] RunPrerequisitesTestInAppxConnect: No need to run prerequisites tests

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Connection state is Collecting Credentials for connection: vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Saved the connectionId in local settings: {f6d5e743-cf45-4d80-bc94-7ae953bdf0bb}

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Requested AccountsManager dialog.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎21‎:‎52‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Using ClientID: c632b3df-fb67-4d84-bdcf-b95ad541b5c8

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] Connect completed.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Success Received Microsoft Entra Credential Token. User: REDACTED

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Group token not enabled, proceeding with server token only.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Storing accountInfo in credentail Locker with CacheSignInUser value: 1.

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Connection state is Socket Connecting for connection: vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Information] AAD Authentication succeeded

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Success Received Microsoft Entra Credential Token. User: REDACTED

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Error] ConnectProfile: Connection trigger time not found for vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Error] Dialing VPN connection vnet-vnetexample-dev-example-vnet-4fpohd, Status = A specified profile cannot be found

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Connection state is UIFailed for connection: vnet-vnetexample-dev-example-vnet-4fpohd

[‎10‎/‎22‎/‎2025‎ ‎11‎:‎22‎:‎14‎ ‎AM UTC] PId:[00049616] TId:[00051816] [ApplicationX] [] [Verbose] Removed the saved connectionId from local settings

Share via

Dialing VPN connection vnet-vnetexample, Status = A specified profile cannot be found

1 answer

Your answer