diff --git a/xos/services/vpn/models.py b/xos/services/vpn/models.py
index 62d7da3..0070d76 100644
--- a/xos/services/vpn/models.py
+++ b/xos/services/vpn/models.py
@@ -287,19 +287,19 @@
         """
         conf = ("client\n" +
                 "dev tun\n" +
+                "remote-cert-tls server\n" +
+                "resolv-retry 60\n" +
+                "nobind\n" +
+                "ca ca.crt\n" +
+                "cert " + client_name + ".crt\n" +
+                "key " + client_name + ".key\n" +
+                "verb 3\n" +
                 self.get_remote_line(
                         self.nat_ip, self.port_number, self.protocol))
         for remote in self.failover_servers:
             conf += self.get_remote_line(
                     remote.nat_ip, remote.port_number, remote.protocol)
 
-        conf += ("resolv-retry 60\n" +
-                 "nobind\n" +
-                 "ca ca.crt\n" +
-                 "cert " + client_name + ".crt\n" +
-                 "key " + client_name + ".key\n" +
-                 "verb 3\n")
-
         if self.is_persistent:
             conf += "persist-tun\n"
             conf += "persist-key\n"