This thesis focuses on the design and implementation of a secure and reliable communication channel between edge devices located at customer premises and the enterprise network. The proposed solution is based on a VPN architecture that ensures encrypted, authenticated, and tamper-resistant communication between distributed devices and internal services. A key feature of the design is the automated rotation of digital certificates through HashiCorp Vault, which enables dynamic credential management, reduces the risk of credential compromise, and removes the need for manual certificate maintenance. OpenLDAP serves as the centralized identity store and single source of truth shared between OpenVPN-AS and Keycloak, ensuring consistent credential management across the entire infrastructure.