How to avoid copying OpenVPN client settings to another computer?

[hidepp]

Hi all,

I'm trying to make an openVPN Server which should be accessible only by specific computers.

I tried to use the User Auth + Certificate option to authenticate, and storing the certificate to Windows Certificate Store.

But if the user export the openVPN certificate on the Windows Certificate Store, even without the private key, and import on another computer, he can still authenticate.

Is there any other option which I could use to create an OpenVPN configuration on the client for a specific computer which the end user cannot copy to an "unauthorized" machine and log in to my VPN from there?

Thanks!