diff --git a/bin/ovpn_getclient b/bin/ovpn_getclient
index 092aeea..c565cef 100755
--- a/bin/ovpn_getclient
+++ b/bin/ovpn_getclient
@@ -58,17 +58,18 @@ $(openssl x509 -in $EASYRSA_PKI/issued/${cn}.crt)
 <ca>
 $(cat $EASYRSA_PKI/ca.crt)
 </ca>
-key-direction 1
-<tls-auth>
+#key-direction 1
+<tls-crypt>
 $(cat $EASYRSA_PKI/ta.key)
-</tls-auth>
+</tls-crypt>
 "
     elif [ "$mode" == "separated" ]; then
         echo "
 key ${cn}.key
 ca ca.crt
 cert ${cn}.crt
-tls-auth ta.key 1
+tls-crypt ta.key
+#tls-auth ta.key 1
 "
     fi