Preparing a small computer for VPN use

I currently run the VPN software Tailscale on a laptop so that I can access my JTDX remote automation application and SatBox alerts from my smartphone while away from home. For details of the setup, see my earlier article on using Tailscale.

Instead of leaving a laptop running all the time for the VPN, I considered using a small Raspberry Pi. The Raspberry Pi Zero 2 W I looked at was priced at more than 8,000 pesos (approximately US$138), while the Raspberry Pi 3 Model B was available for as little as 2,400 pesos (approximately US$40), so I decided to use the Pi 3 Model B. Eventually, I plan to add audio input and output and develop the system for remote satellite radio operation.

This article records how to write Raspberry Pi OS to a microSD card using a Windows PC and prepare it for SSH operation without a connected monitor or keyboard. As of October 4, 2026, I have not yet purchased the Raspberry Pi itself, so the work completed so far is limited to preparing the microSD card. The first-boot instructions and subsequent steps are a guide for use after purchasing the hardware. Installing Tailscale and configuring the VPN are separate tasks.

What you need

• A Windows PC with internet access and a microSD card reader
• A microSD card (around 32 GB is a convenient size for the Lite setup in this article, with room for updates and additional software)
• A Raspberry Pi 3 Model B and a suitable, stable micro-USB power supply rated around 5.1 V, 2.5 A
• The SSID and password for your Wi-Fi network, or an Ethernet cable to connect to your router

The microSD card acts as the Raspberry Pi's system disk. Writing the OS will erase all data on the card, so back up any files you need first.

1. Download Raspberry Pi Imager

Raspberry Pi OS is a Linux-based operating system. Here, we use the official image-writing tool, Raspberry Pi Imager. On your Windows PC, open the official Raspberry Pi software page and download Imager for Windows. Imager downloads the OS later during the writing process, so there is no need to download a separate OS image at this stage.

2. Install Imager

Open the downloaded executable and follow the instructions to install Imager on your Windows PC. The file I used was named imager_2.0.11.1.exe. The filename and screens may differ with other versions. Once installation is complete, launch Raspberry Pi Imager.

3. Select your Raspberry Pi model

On the Device screen, select Raspberry Pi 3. Selecting the hardware first makes it easier to choose a compatible OS. If you are using another model, select that model instead.

4. Select the OS

If you want a desktop interface, select the standard Raspberry Pi OS. Raspberry Pi OS Full includes the desktop and additional recommended applications. Since this setup is intended for VPN use and will be controlled with commands from a Windows PC, open Raspberry Pi OS (other) and choose Lite.

In this example, I selected Raspberry Pi OS Lite (64-bit). Lite has no desktop interface and is operated through a text terminal. It supports the Pi 3 Model B and suits this setup without a connected monitor. “Lite” does not mean that you cannot add features: you can install the software you need later.

5. Select the destination card

Insert the microSD card into the card reader and connect it to your Windows PC. Select that card on the Storage screen. Check the displayed capacity and name to avoid selecting another USB drive or external disk by mistake. If you cannot identify the card confidently, disconnect any unnecessary external storage and select it again.

6. Configure the settings before first boot

Hostname

The hostname identifies the Raspberry Pi on your network. For example, enter hamcontrol. Choose a name that is not already used by another device on the same LAN. Later in this guide, we use hamcontrol.local for the SSH connection. Replace it with the hostname you actually set.

Location, time zone, and keyboard

Set the location and time zone to match where you will use the Raspberry Pi. For example, use Asia/Tokyo in Japan or Asia/Manila in the Philippines. Select the layout of the keyboard you will connect. These settings affect the displayed time and input from a keyboard connected to the Raspberry Pi.

Username and password

Create a username and password for logging in. An example username is radio. The name root is reserved for the system administrator and should not be used as your regular username. You will use the account you create here when connecting through SSH.

Keep a record of your settings and choose a password that is difficult to guess and different from those you use for other services. Treat any values shown in the screenshots as examples and enter your own settings.

Wi-Fi

Enter the SSID (network name) and password of the Wi-Fi network you want to use. Even if Imager imports connection details from Windows, check that they match the network at the Raspberry Pi's installation location. These details are not always filled in automatically.

The built-in Wi-Fi on the Raspberry Pi 3 Model B uses 2.4 GHz. It cannot connect to a 5 GHz-only SSID. Set the Wi-Fi country to match the installation location. If you will use Ethernet, you can skip the Wi-Fi settings and connect an Ethernet cable for the first boot.

Enable SSH

SSH lets you connect to the Raspberry Pi from another computer and run commands. Enable SSH so that you can operate it without a monitor. This guide uses password authentication with the user account created on the previous screen. If you prefer public key authentication, choose the option to register the public key from the computer you will connect from.

Raspberry Pi Connect

Raspberry Pi Connect is the official service for accessing a Raspberry Pi over the internet. For this setup, I plan to perform the initial configuration through SSH on the same LAN and install Tailscale afterward, so I leave Connect disabled. Disabling Connect does not prevent you from using the SSH access enabled on the previous screen.

7. Review the settings and write the OS

On the review screen, check the Raspberry Pi model, OS, destination microSD card, and the settings you entered. If everything is correct, start writing. Imager downloads the OS and writes it to the card.

A warning explains that the data on the card will be erased. Check again that this is the microSD card you intend to erase before continuing. Do not remove the card or turn off the PC while writing is in progress.

After writing, Imager verifies the data on the card. In my setup, downloading, writing, and verification took about 35 minutes in total. The time depends on your internet connection, card, and card reader. Wait for confirmation that verification has completed successfully, then safely eject and remove the card.

If Windows asks you to format the card, cancel the prompt without formatting it. This can happen because Windows cannot read the Linux partitions written to the card. Your boot card is now ready.

8. After purchasing the hardware: first boot and SSH connection

Carry out the following steps once you have the Raspberry Pi hardware. I have not yet tested this configuration on the actual device.

1. With the Raspberry Pi disconnected from power, insert the prepared microSD card. If using Ethernet, connect it to your router with an Ethernet cable.
2. Connect the micro-USB power supply last. The Raspberry Pi starts as soon as power is connected. Allow a few minutes for the first boot, as initial configuration and restarts may take some time.
3. Connect your Windows PC to the same LAN, open PowerShell or Windows Terminal, and run the following command.

ssh radio@hamcontrol.local

Replace radio with the username you created and hamcontrol with your chosen hostname. On the first connection, SSH asks whether to trust the host key. Confirm that the destination is your own Raspberry Pi, then enter yes. Next, enter the password you set. It is normal for no characters or asterisks to appear while typing the password. Press Enter to submit it.

If a prompt showing your username and hostname appears after login, the SSH connection has succeeded. Commands entered in this window will now run on the Raspberry Pi.

If you cannot connect

• Hostname not found: look up the Raspberry Pi's IP address in your router's connected-device list, then connect using a command such as ssh radio@192.168.1.50. Replace the IP address with the actual address.
• Connection times out: allow time for the Pi to start, then check the power supply, Ethernet cable, Wi-Fi SSID and password, and 2.4 GHz connection. Guest Wi-Fi and other networks that block communication between devices may prevent access.
• Connection refused: check that you enabled SSH in Imager. If authentication fails, check the username, password, and authentication method.
• Windows cannot find ssh: check whether OpenSSH Client is installed under Optional features.

9. Update the OS and shut down safely

After logging in, refresh the package list and update the installed software. Run the following commands one line at a time. sudo runs a command with administrator privileges.

sudo apt update
sudo apt full-upgrade

Read the proposed changes and confirmation messages, then follow the prompts if you wish to continue. Restart after the update completes.

sudo reboot

Restarting disconnects your SSH session. Wait a little, then reconnect using the same SSH command. When you have finished and want to turn off the Raspberry Pi, use the following command.

sudo shutdown -h now

Wait for shutdown to finish before disconnecting the power supply. Shutdown may still be in progress just after SSH disconnects. Removing power or the microSD card while data is being written can corrupt files.

Future plans

For budget reasons, I have postponed purchasing the Raspberry Pi 3 Model B and will continue using Tailscale on my laptop for now. Once I have the hardware, I plan to confirm startup, SSH access, and OS updates before installing Tailscale and configuring its connection. Writing the OS to the card alone does not make the VPN ready to use.

References: Raspberry Pi official documentation: Getting started / Raspberry Pi official documentation: Remote access. The screenshots show the version of Imager used for this article. Item names and screen layouts may differ in other versions.